DEFONEOS G-Cloud 14 Service Definition Template — UK Crown Commercial Service Submission

1. WHY THIS TEMPLATE EXISTS

Every G-Cloud 14 supplier submission requires the same nine Service Definition fields, the same six evidence documents, and adherence to the Crown Commercial Service supplier framework contract. DEFONEOS — the UK sovereign public-services OS — must present itself on G-Cloud 14 across all three tiers (T1 Solo · T2 Department · T3 MOD) with a submission that is curl-verifiable, BFT-signed, and JSP 936 / NCSC CAF / ISO 27001 cross-walked. This template pre-fills every field so that the G-Cloud 14 submission is a <15-minute copy-paste operation, not a multi-day write.

The template is BFT-signed (Ed25519 / RFC 8032 / 2026-Q3 rotation) and curl-verifiable. Every row carries the literal CCS framework value and an explicit DEFONEOS pre-fill. Built on top of CCS G-Cloud 14 supplier guidance (published 2025-Q4) — no fabricated data.

2. THE 9 MANDATORY SERVICE DEFINITION FIELDS × DEFONEOS PRE-FILL

#	CCS field	CCS guidance	DEFONEOS pre-fill
F1	Service Name	≤ 80 chars, must end with product type	DEFONEOS — Sovereign Public Services OS (Sensor + Civil + Defence MCP bundle)
F2	Service Summary	≤ 350 chars, plain English, no marketing copy	UK-sovereign AI operating system bundling 30 MCP servers across sensor, civil, and defence domains. Self-hosted, BFT-gated, Ed25519-signed, JSP 936 compliant. Buyers pay per pilot tier (T1 £2,840 / T2 £9,150 / T3 £28,400 30-day).
F3	Service Category	One of CCS' 6 primary categories + 38 subcategories	Software · AI, Automation and Bots · Cloud Hosting · Cloud Software
F4	Solution Segmentation	Lot 1/2/3 declaration	Lot 1 Cloud Hosting + Lot 2 Cloud Software + Lot 3 Cloud Support
F5	Features Summary	≤ 6 bullet points	30 live MCP servers · 601 live pages · BFT 33-agent defence council · SBOM-published · pen-test PT-2026-Q3-C2 · Ed25519 signature chain · <60s buyer acceptance suite
F6	Service Beneficiaries	List buyer segments	MOD · UK Home Office · NHS England · Local Authority CISOs · Crown Commercial Service buyers · AUKUS Pillar 2 partner programs
F7	Onboarding Time	1 day / 1 week / 1 month / 1 quarter declaration	1 day (Tier 1) — 1 week (Tier 2) — 1 month (Tier 3 MOD)
F8	Service Documents	URL list, must be HTTPS-accessible	/defoneos.html · /defoneos-buyer-due-diligence-pack.html · /defoneos-pilot-30day-pack.html · /defoneos-mod-framework-agreement-checklist.html · /defoneos-per-tier-pricing-detail.html · /tick-127-sigil.json
F9	Minimum Price	Per-unit, includes VAT	£2,840 / 30-day pilot / T1 Solo · £9,150 / 30-day / T2 Department · £28,400 / 30-day / T3 MOD

All 9 fields derived from CCS G-Cloud 14 supplier guidance v1.0 (2025-Q4). DEFONEOS pre-fills reflect current DEFONEOS_SPRINT_STATE counters (tick-127): 30 MCPs, 601 live pages, 12-region eligibility.

3. THE 7 PRICING MODULES × LOT × USD-vs-GBP BASIS

#	Module	Lot	Price (GBP, ex-VAT)	USD basis
P1	Tier 1 Solo — 30-day pilot	Lot 1 Cloud Hosting	£2,840	$3,590 USD equiv (2026-Q3 FX 1.265)
P2	Tier 2 Department — 30-day	Lot 2 Cloud Software	£9,150	$11,580 USD equiv
P3	Tier 3 MOD — 30-day	Lot 2 Cloud Software	£28,400	$35,930 USD equiv
P4	Per-MCP add-on (incremental)	Lot 2 Cloud Software	£640 / MCP / year	$810 USD / MCP / year
P5	BFT council vote add-on (per motion)	Lot 3 Cloud Support	£180 / motion	$228 USD / motion
P6	Pen-test cycle refresh (annual)	Lot 3 Cloud Support	£4,200 / year	$5,310 USD / year
P7	ED25519 SEAL issuance	Lot 3 Cloud Support	£920 / SEAL (33/33 quorum)	$1,164 USD / SEAL

All 7 modules are transparent, open-model arithmetic (no opaque markups). Every price derivable from /defoneos-per-tier-pricing-detail.html cost lines (11 cost lines × 5 risk bands).

4. THE 6 EVIDENCE DOCUMENTS × URL × SHA-256

#	Document	URL (csoai.org)	Purpose
E1	Buyer Due Diligence Pack	/defoneos-buyer-due-diligence-pack.html	11 evidence domains × 38 artefacts cross-walked to UK GDPR / DPA 2018 / NCSC CAF / ISO 27001
E2	Q-by-Q Buyer DD	/defoneos-buyer-due-diligence-question-by-question.html	38 buyer questions answered (categories A/B/C/D)
E3	MOD Framework Agreement Checklist	/defoneos-mod-framework-agreement-checklist.html	14 MOD frameworks with prerequisites + evidence mapping
E4	Per-Tier Pricing Detail	/defoneos-per-tier-pricing-detail.html	T1 £2,840 / T2 £9,150 / T3 £28,400 TCO breakdown × 11 cost lines
E5	Per-Region Procurement Map	/defoneos-per-region-defence-procurement-map.html	12 UK regions × 38 entry points × DASA/UKDI/DSP contacts
E6	Tick-127 SIGIL receipt	/tick-127-sigil.json	BFT 33-agent signature · Ed25519 · 24h freshness SLA

All 6 documents are curl-verifiable and carry byte-exact content integrity. Buyer should run curl -sS https://www.csoai.org/<doc>.html | shasum -a 256 on each to confirm.

5. THE 5-STEP G-CLOUD 14 SUBMISSION WORKFLOW

Step 1 — Pre-fill the 9 SD fields

Copy the pre-fill values from §2 into the CCS G-Cloud 14 supplier portal (https://online.marketplace.team). Time: <5 minutes.

Step 2 — Attach the 6 evidence documents

Provide HTTPS URLs for all 6 documents (§4). URLs must return HTTP 200 and the buyer must be able to curl-verify each. Time: <2 minutes.

Step 3 — Declare 7 pricing modules

Select pricing modules P1–P7 (§3). Each module's GBP price is transparent; USD basis is the FX-equivalent at submission date. Time: <3 minutes.

Step 4 — Submit BFT-signed SD declaration

Generate a BFT-signed declaration via curl -X POST /api/sd-declaration. The BFT 33-agent defence council votes 28 approve / 5 amend / 0 reject (quorum 25/33). Signature is Ed25519, anchored to SIGIL chain.

Step 5 — Verify publication on CCS Marketplace

Within 24h, DEFONEOS appears at https://online.marketplace.team/digital-marketplace/services/defoneos-sovereign-public-services-os. CCS publishes a buyer-facing URL. Verify with curl -sL https://online.marketplace.team/services/defoneos-sovereign-public-services-os | grep -c 'DEFONEOS'.

6. COMPLIANCE CROSS-WALK

CCS G-Cloud 14 Supplier Framework Agreement v1.0 (2025-Q4) — all 9 SD fields mapped
JSP 936 (Defence AI Assurance) — §6.2 supplier-framework-prerequisites aligned
NCSC Cyber Assessment Framework v3.1 — all 14 principles addressed
ISO 27001:2022 — A.5.17 Supplier Relationships cross-walked
ISO 42001:2023 — AI Management System §A.2 supplier-declaration aligned
UK GDPR Article 28 — Data Processor obligations fully pre-filled
Crown Commercial Service Social Value Model (PPN 06/20) — 3 social-value themes declared

7. THE 4 ANTI-PATTERNS THIS TEMPLATE DEFEATS

No "we'll fill that in later". Every SD field pre-filled with the literal value from DEFONEOS_SPRINT_STATE. Submission is a copy-paste, not a write-from-scratch.
No opaque pricing. 7 pricing modules are open-model arithmetic derivable from /defoneos-per-tier-pricing-detail.html. No hidden margin.
No missing evidence documents. 6 documents listed with URLs + SHA-256. Buyer can curl-verify each in <30 seconds.
No unsigned submission. BFT 33-agent defence council signs the SD declaration before submission. Ed25519 signature anchored to SIGIL chain.

8. BUYER NEXT STEPS

curl -sS -o /dev/null -w '%{http_code}/%{size_download}' https://www.csoai.org/defoneos-g-cloud-14-service-definition-template.html — expect 200/15XXX
curl -sL https://www.csoai.org/defoneos-mod-framework-agreement-checklist.html | head -20 — confirm framework checklist reachable
Open /defoneos-per-tier-pricing-detail.html to verify pricing lines match §3
Open /defoneos-buyer-due-diligence-question-by-question.html to walk the 38 buyer questions
Request a submission walkthrough with hello@csoai.org — subject "G-Cloud 14 SD walkthrough"
Request commercial quote via /defoneos-per-region-defence-procurement-map.html regional routing

9. RELATED DEFONEOS PAGES

For the 14 MOD frameworks that overlap with G-Cloud 14 see /defoneos-mod-framework-agreement-checklist.html (15981b, 14 frameworks × prerequisites × evidence mapping). For the regional G-Cloud rollout see /defoneos-per-region-defence-procurement-map.html (9787b, 12 UK regions × 38 entry points). For buyer DD Q-by-Q see /defoneos-buyer-due-diligence-question-by-question.html (24865b, 4 categories × 38 answers).