10 UK education entry points · 7 education AI priorities · 6 education DEFONEOS MCPs · DfE digital backbone
The Department for Education (DfE) manages £116B annual education spend across 24,000+ schools, 288 FE colleges, and 166 universities. The DfE's AI in Education strategy (2025-2027) mandates audit-grade AI governance for EdTech, assessment AI, and administrative automation. Ofsted's Education Inspection Framework (EIF) now includes digital safeguarding and AI-assisted assessment scrutiny. The Joint Information Systems Committee (JISC) sets HE/FE AI adoption standards across UK higher and further education.
DEFONEOS provides MATs, universities, FE colleges, and EdTech developers with a UK-sovereign, BFT-governed, audit-grade AI operating system purpose-built for education compliance at the OFFICIAL / OFFICIAL-SENSITIVE boundary. This pack maps 10 education procurement entry points, cross-references 7 education AI priorities to DEFONEOS MCP coverage, and demonstrates the DfE digital backbone architecture.
All entries are BFT-signed (Ed25519 / RFC 8032 / 2026-Q3 rotation) and curl-verifiable. Per-entry contacts sourced from DfE Digital & Technology (2026-Q1) + ESFA procurement pipeline.
| # | Entry point | Location | Education function | DEFONEOS fit |
|---|---|---|---|---|
| E1 | Department for Education — Digital & Technology | London / Coventry | National EdTech strategy · AI policy · data standards | DEFONEOS MCPs: bft-council-probe · mcp-cspm — BFT-governed AI policy compliance + national education data governance |
| E2 | Education & Skills Funding Agency (ESFA) | Coventry | Academy funding · MAT oversight · financial assurance | DEFONEOS MCPs: bft-council-probe · mcp-cspm — BFT funding audit trail + MAT financial compliance |
| E3 | Ofsted — Education Inspection | Manchester / London | School inspection · digital safeguarding · AI-assisted assessment scrutiny | DEFONEOS MCPs: bft-council-probe · mcp-dynamic-sbom — BFT inspection evidence + EdTech SBOM audit |
| E4 | JISC — HE/FE Digital Standards | Bristol | University/college AI adoption · cybersecurity · digital infrastructure | DEFONEOS MCPs: bft-council-probe · mcp-cspm · mqtt-bridge — BFT digital standards + IoT campus infrastructure |
| E5 | Office for Students (OfS) | Bristol | HE regulation · quality assurance · student protection | DEFONEOS MCPs: bft-council-probe · mcp-cspm — BFT HE quality governance + student data compliance |
| E6 | Student Loans Company (SLC) | Glasgow / Darlington | Student finance · payment processing · fraud detection AI | DEFONEOS MCPs: bft-council-probe · mcp-dynamic-sbom — BFT fraud AI governance + payment system SBOM |
| E7 | Standards & Testing Agency (STA) | London / Coventry | National curriculum assessments · SATs · AI-assisted marking | DEFONEOS MCPs: bft-council-probe · mcp-dynamic-sbom — BFT assessment AI audit + marking algorithm SBOM |
| E8 | DfE Teacher Regulation Agency | Coventry | Teacher misconduct · professional standards · DBS integration | DEFONEOS MCPs: bft-council-probe · mcp-cspm — BFT regulatory compliance + safeguarding data governance |
| E9 | Multi-Academy Trusts (Top 50 MATs) | Regional | School group governance · centralised procurement · EdTech adoption | DEFONEOS MCPs: bft-council-probe · mqtt-bridge · mcp-cspm — MAT-level BFT governance + campus IoT pipeline |
| E10 | EdTech UK / BETT Advisory Board | London | EdTech industry standards · AI ethics · procurement frameworks | DEFONEOS MCPs: bft-council-probe · mcp-dynamic-sbom · mcp-cspm — BFT vendor governance + EdTech SBOM assurance |
| # | Education AI priority | Lead body | DEFONEOS MCP coverage | Alignment cross-walk |
|---|---|---|---|---|
| F1 | AI-assisted assessment & marking governance | STA / Ofqual | bft-council-probe · mcp-dynamic-sbom | Ofqual Conditions of Recognition · Equality Act 2010 · ISO 24027 (AI bias) |
| F2 | EdTech data protection & safeguarding | DfE / Ofsted | mcp-cspm · bft-council-probe | UK GDPR · DfE Keeping Children Safe · KCSIE 2025 · Age Appropriate Design Code |
| F3 | AI bias & fairness in education | OfS / JISC | bft-council-probe · mcp-cspm | Equality Act 2010 · EU AI Act Art 5 (prohibited) · OfS condition of registration |
| F4 | Campus IoT & smart infrastructure | JISC / DfE Estates | mqtt-bridge · rtsp-camera · bft-council-probe | JISC Cyber Security Standards · DfE Digital Standards · BSRIA BG 69 |
| F5 | Student wellbeing & mental health AI | DfE / OfS | bft-council-probe · mcp-cspm | DfE Mental Health & Wellbeing · KCSIE · Children's Code (ICO) |
| F6 | Research integrity & AI in academia | UKRI / JISC / OfS | mcp-dynamic-sbom · bft-council-probe | UKRI Research Integrity · Concordat · REF 2029 AI policy · EPSRC framework |
| F7 | Education digital backbone & interoperability | DfE Digital / JISC | All 30 MCPs (federated education pipeline) | DfE Digital Strategy 2025-2027 · JISC HE Cloud Strategy · ISO 42001 · UK AISI |
| # | MCP | Category | Education deployment | Key capability |
|---|---|---|---|---|
| M1 | bft-council-probe | Core | All 10 education entry points | 33-agent BFT defence council · quorum-gated education AI decision audit |
| M2 | mcp-cspm | Compliance | DfE · OfS · ESFA · MAT compliance | Cloud security posture management · DfE Digital Standards alignment · data governance |
| M3 | mcp-dynamic-sbom | Compliance | EdTech supply chain · assessment algorithms | Real-time SBOM generation · EdTech software supply chain assurance |
| M4 | mqtt-bridge | Sensor | Campus IoT · smart building · environmental monitoring | IoT sensor bridge · MQTT sovereign data ingest · campus infrastructure network |
| M5 | rtsp-camera | Sensor | Campus security · safeguarding zones (non-classroom) | IP camera ingest · sovereign video pipeline (OFFICIAL only, no classroom recording) |
| M6 | openaq-air | Sensor | School air quality · classroom ventilation monitoring | Global air quality data · school environmental health monitoring |
| DfE Component | Role | DEFONEOS integration | MCP coverage |
|---|---|---|---|
| DfE Digital & Technology | National EdTech policy | BFT-governed AI policy compliance + CSPM monitoring | mcp-cspm · bft-council-probe |
| Ofsted EIF Digital | Inspection framework for digital | SBOM + BFT audit trail for EdTech inspection evidence | mcp-dynamic-sbom · bft-council-probe |
| JISC Cloud & Cyber | HE/FE digital standards | University-level BFT governance + campus IoT pipeline | bft-council-probe · mqtt-bridge · mcp-cspm |
| OfS Regulatory | HE quality assurance | BFT audit trail for OfS registration compliance | bft-council-probe · mcp-cspm |
| ESFA Academies | MAT financial assurance | BFT governance + financial compliance monitoring | bft-council-probe · mcp-dynamic-sbom |
| Step | Action | Who | Time | Prerequisite |
|---|---|---|---|---|
| 1 | Identify education cluster (Assessment / Safeguarding / Bias / IoT / Wellbeing / Research / Digital) | Buyer | 15 min | This compliance pack §2 |
| 2 | Confirm procurement vehicle (DfE direct / G-Cloud 14 / ESFA / JISC) | Buyer + CSOAI | 30 min | Framework checklist |
| 3 | Confirm data governance boundary (UK GDPR / KCSIE / Age Appropriate Design Code) | Buyer + CSOAI | 1 hour | SC clearance guide |
| 4 | Submit education pilot request (MAT-specific / university-wide / EdTech vendor) | Buyer | 1 hour | DSP tracker |
| 5 | CSOAI provisions education-region sovereign VM + DEFONEOS substrate | CSOAI | <24 hours | AG-1: curl -s /health HTTP 200 |
⚠️ HARD RED-LINE: DEFONEOS handles OFFICIAL and OFFICIAL-SENSITIVE data ONLY. No student-identifiable data (Unique Pupil Numbers, SEN records, or Children's Social Care data) flows through DEFONEOS without explicit DfE data sharing approval and DPIA. DEFONEOS provides governance, compliance monitoring, and SBOM assurance for EdTech systems — the pupil data itself flows through accredited DfE APIs / S2S / COLLECT channels. BFT council decisions are audit metadata, not student records.
| Buyer type | Entry point | Procurement vehicle | Security requirement | Pilot tier |
|---|---|---|---|---|
| DfE Digital & Technology | E1 | DfE direct / G-Cloud 14 | OFFICIAL-SENSITIVE / SC | T3 |
| Multi-Academy Trust (50+ schools) | E9 | G-Cloud 14 / ESFA | OFFICIAL-SENSITIVE | T2 |
| University / HE Provider | E5 / E4 | G-Cloud 14 / JISC | OFFICIAL-SENSITIVE / JANET | T2 |
| FE College | E4 / E9 | G-Cloud 14 / ESFA | OFFICIAL | T1/T2 |
| EdTech Vendor / SME | E10 / E1 | G-Cloud 14 / DfE | OFFICIAL | T1 |
| Ofsted / Regulatory Body | E3 | Ofsted direct | OFFICIAL-SENSITIVE / SC | T2 |