11 UK justice entry points · 8 justice AI priorities · 6 justice DEFONEOS MCPs · HMCTS & MoJ digital backbone
The Ministry of Justice (MoJ) manages £11.6B annual spend across HMCTS (courts & tribunals), HMPPS (prisons & probation), the Legal Aid Agency, and the Criminal Injuries Compensation Authority. The HMCTS Reform Programme (£1.3B) has deployed digital case management across 350+ courts. The MoJ's AI strategy (2025-2028) identifies AI-assisted sentencing, risk assessment (OASys), legal research, and prison security as high-priority domains requiring audit-grade governance.
DEFONEOS provides MoJ agencies, HMCTS, HMPPS, and legal tech developers with a UK-sovereign, BFT-governed, audit-grade AI operating system purpose-built for justice compliance at the OFFICIAL / OFFICIAL-SENSITIVE boundary. This pack maps 11 justice procurement entry points, cross-references 8 justice AI priorities to DEFONEOS MCP coverage, and demonstrates the MoJ digital backbone architecture.
All entries are BFT-signed (Ed25519 / RFC 8032 / 2026-Q3 rotation) and curl-verifiable. Per-entry contacts sourced from MoJ Digital & Technology (2026-Q1) + HMCTS procurement pipeline.
| # | Entry point | Location | Justice function | DEFONEOS fit |
|---|---|---|---|---|
| J1 | MoJ — Digital & Technology | London | National justice AI strategy · digital transformation · data standards | DEFONEOS MCPs: bft-council-probe · mcp-cspm — BFT-governed AI policy compliance + national justice data governance |
| J2 | HMCTS — Digital Services | London / Birmingham | Court digital case management · online dispute resolution · AI-assisted scheduling | DEFONEOS MCPs: bft-council-probe · mcp-dynamic-sbom — BFT case management audit + HMCTS digital platform SBOM |
| J3 | HMPPS — Prisons & Probation | London / Regional | Prison security AI · probation risk assessment · OASys | DEFONEOS MCPs: bft-council-probe · mqtt-bridge · rtsp-camera — BFT risk AI audit + prison IoT + CCTV pipeline |
| J4 | Legal Aid Agency (LAA) | London | Legal aid eligibility · means testing · AI-assisted case allocation | DEFONEOS MCPs: bft-council-probe · mcp-cspm — BFT eligibility AI audit + financial compliance |
| J5 | Parole Board | London | Parole decisions · risk assessment AI · evidence review | DEFONEOS MCPs: bft-council-probe · mcp-dynamic-sbom — BFT parole AI governance + risk model SBOM |
| J6 | Criminal Cases Review Commission (CCRC) | Birmingham | Case review · evidence analysis AI · miscarriage detection | DEFONEOS MCPs: bft-council-probe · mcp-dynamic-sbom — BFT evidence AI audit + forensic SBOM |
| J7 | HM Land Registry | Plymouth / London | Property AI · conveyancing automation · fraud detection | DEFONEOS MCPs: bft-council-probe · mcp-cspm · mcp-dynamic-sbom — BFT property AI governance + conveyancing SBOM |
| J8 | Tribunals Service | Regional | Immigration / employment / tax tribunals · AI scheduling · decision support | DEFONEOS MCPs: bft-council-probe · mcp-cspm — BFT tribunal AI compliance + case management governance |
| J9 | Victim & Witness Service | Regional | Victim support AI · witness preparation · trauma-informed AI | DEFONEOS MCPs: bft-council-probe · mcp-cspm — BFT victim AI ethics + safeguarding compliance |
| J10 | Office of the Public Guardian | Birmingham | Power of Attorney · Court of Protection · deputy oversight | DEFONEOS MCPs: bft-council-probe · mcp-dynamic-sbom — BFT capacity AI governance + legal document SBOM |
| J11 | Criminal Justice Joint Inspection | London / Regional | Cross-justice inspection · HMI Prisons · HMI Probation · CJS digital oversight | DEFONEOS MCPs: bft-council-probe · mcp-cspm · mcp-dynamic-sbom — BFT inspection evidence + CJS-wide compliance |
| # | Justice AI priority | Lead body | DEFONEOS MCP coverage | Alignment cross-walk |
|---|---|---|---|---|
| F1 | AI-assisted sentencing & risk assessment | MoJ / HMPPS / Parole Board | bft-council-probe · mcp-dynamic-sbom | MoJ AI Ethics Framework · Sentencing Act 2020 · ECHR Art 6 (fair trial) |
| F2 | Court digital case management AI | HMCTS | bft-council-probe · mcp-cspm | HMCTS Reform Programme · Constitutional Reform Act · UK GDPR |
| F3 | Prison security & surveillance AI | HMPPS / MoJ | mqtt-bridge · rtsp-camera · bft-council-probe | Prison Act 1952 · MoJ Security Policy · Surveillance Camera Code · RIPA |
| F4 | Legal aid & access to justice AI | LAA / MoJ | bft-council-probe · mcp-cspm | Legal Aid Sentencing & Punishment of Offenders Act 2012 · ECHR Art 6 |
| F5 | Evidence & forensic AI analysis | CCRC / CPS / Forensic Science Regulator | mcp-dynamic-sbom · bft-council-probe | Criminal Procedure Rules · Forensic Science Regulator Act 2021 · ISO 17025 |
| F6 | Property & conveyancing AI | HM Land Registry | mcp-cspm · mcp-dynamic-sbom · bft-council-probe | Land Registration Act 2002 · MoJ digital conveyancing · Money Laundering Regs |
| F7 | Victim support & safeguarding AI | MoJ / Victims' Commissioner | bft-council-probe · mcp-cspm | Victims & Prisoners Act 2024 · Code of Practice for Victims · Domestic Abuse Act |
| F8 | Justice digital backbone & interoperability | MoJ Digital / HMCTS | All 30 MCPs (federated justice pipeline) | MoJ Digital Strategy 2025-2028 · Common Platform · CJS data sharing · ISO 42001 |
| # | MCP | Category | Justice deployment | Key capability |
|---|---|---|---|---|
| M1 | bft-council-probe | Core | All 11 justice entry points | 33-agent BFT defence council · quorum-gated justice AI decision audit |
| M2 | mcp-cspm | Compliance | MoJ · HMCTS · LAA compliance | Cloud security posture management · MoJ data governance · CJSM compliance |
| M3 | mcp-dynamic-sbom | Compliance | Legal tech supply chain · court platform | Real-time SBOM generation · legal tech software supply chain assurance |
| M4 | mqtt-bridge | Sensor | Prison IoT · smart building · environmental monitoring | IoT sensor bridge · MQTT sovereign data ingest · prison infrastructure network |
| M5 | rtsp-camera | Sensor | Prison CCTV · court security · custody suite monitoring | IP camera ingest · sovereign video pipeline (OFFICIAL-SENSITIVE with RIPA authority) |
| M6 | openaq-air | Sensor | Prison air quality · court building environment | Global air quality data · custodial environment monitoring |
| MoJ Component | Role | DEFONEOS integration | MCP coverage |
|---|---|---|---|
| MoJ Digital & Technology | National justice AI policy | BFT-governed AI policy compliance + CSPM monitoring | mcp-cspm · bft-council-probe |
| HMCTS Common Platform | Digital case management | SBOM + BFT audit trail for court digital platform | mcp-dynamic-sbom · bft-council-probe |
| HMPPS Digital | Prison & probation digital | Prison IoT BFT governance + security AI pipeline | bft-council-probe · mqtt-bridge · rtsp-camera |
| MoJ Analytical Platform | Justice data analytics | BFT analytics governance + data pipeline monitoring | bft-council-probe · mcp-cspm |
| CJS Digital Board | Cross-justice digital strategy | CJS-wide BFT governance + interoperability assurance | bft-council-probe · mcp-dynamic-sbom · mcp-cspm |
| Step | Action | Who | Time | Prerequisite |
|---|---|---|---|---|
| 1 | Identify justice cluster (Sentencing / Court / Prison / Legal Aid / Evidence / Property / Victim / Digital) | Buyer | 15 min | This compliance pack §2 |
| 2 | Confirm procurement vehicle (MoJ direct / G-Cloud 14 / CCS / HMCTS) | Buyer + CSOAI | 30 min | Framework checklist |
| 3 | Confirm data governance boundary (UK GDPR / RIPA / CJSM / MoJ Security) | Buyer + CSOAI | 1 hour | SC clearance guide |
| 4 | Submit justice pilot request (HMCTS-specific / prison-wide / CJS cross-cutting) | Buyer | 1 hour | DSP tracker |
| 5 | CSOAI provisions justice-region sovereign VM + DEFONEOS substrate | CSOAI | <24 hours | AG-1: curl -s /health HTTP 200 |
⚠️ HARD RED-LINE: DEFONEOS handles OFFICIAL and OFFICIAL-SENSITIVE data ONLY. No legally privileged material, subject-identifiable criminal justice data (PNC records, OASys assessments, NOMIS data), or sensitive personal data flows through DEFONEOS without explicit MoJ data sharing authority and DPIA. DEFONEOS provides governance, compliance monitoring, and SBOM assurance for justice AI systems — the case data itself flows through accredited CJS networks / Common Platform / XHIBIT. BFT council decisions are audit metadata, not case records.
| Buyer type | Entry point | Procurement vehicle | Security requirement | Pilot tier |
|---|---|---|---|---|
| MoJ Digital & Technology | J1 | MoJ direct / G-Cloud 14 | OFFICIAL-SENSITIVE / SC | T3 |
| HMCTS Court Manager | J2 | G-Cloud 14 / CCS | OFFICIAL-SENSITIVE / CJSM | T2 |
| HMPPS Governor / Probation | J3 | G-Cloud 14 / MoJ | OFFICIAL-SENSITIVE / SC | T2 |
| Legal Aid Practitioner | J4 | G-Cloud 14 / LAA | OFFICIAL / CJSM | T1 |
| Legal Tech / SME | J2 / J7 | G-Cloud 14 / CCS | OFFICIAL | T1 |
| Cross-CJS Inspectorate | J11 | MoJ direct / G-Cloud 14 | OFFICIAL-SENSITIVE / SC | T2/T3 |