🔄 DEFONEOS: MCP Category Lifecycle — SEAL Drift Audit

Per-MCP lifecycle state, drift detection, and SEAL-eligibility re-qualification windows. The MCP SEAL eligibility tracker (tick-120) shows the snapshot state of all 30 MCPs; this page goes one level deeper — the temporal view. It shows how each MCP moves through 7 lifecycle states (REGISTERED → SBOM_PUBLISHED → REDLINE_SCANNED → OWNER_COSIGNED → WITNESS_ROTATED → BFT_VOTED → SEAL_ISSUED), surfaces drift events where a SEALed MCP loses an invariant, and prescribes the re-qualification window.

Snapshot: 2026-07-17T07:30:00Z  ·  MCPs tracked: 30  ·  SEALed: 4  ·  Eligible (≥7/7): 4  ·  Pending (5/7): 26  ·  Drift events: 0  ·  Source: tick-120 SEAL tracker + tick-119 per-ring drill-down + tick-117 SBOM index.

🛤️ Seven Lifecycle States

Every MCP moves through 7 lifecycle states. SEAL issuance requires traversing all 7. Each state is recorded with a SIGIL anchor, an Ed25519 signature, and a timestamp. State regression (e.g. SEAL_ISSUED → REDLINE_SCANNED) is treated as a drift event.

1. REGISTERED

30 / 30

SBOM record exists with artefact hash, owner seat, and compartment assignment.

COMPLETE · 30

2. SBOM_PUBLISHED

30 / 30

SPDX 2.3 manifest live with Ed25519 signature + 24h freshness probe.

COMPLETE · 30

3. REDLINE_SCANNED

30 / 30

7 red-line scan checks pass (US CDN, US root CA, US cloud API, US NTP, US telemetry, US-vendor JS, kinetic patterns).

COMPLETE · 30

4. OWNER_COSIGNED

30 / 30

R1 owner-seat counter-signature anchors the artefact to the BFT minutes ledger.

COMPLETE · 30

5. WITNESS_ROTATED

4 / 30

VRF-seeded 3-witness snapshot present + ≤90d from last rotation. 26 MCPs need Q3-2026 witness refresh.

PARTIAL · 4/30

6. BFT_VOTED

4 / 30

BFT motion passed at ≥REDLINE 27/33 threshold with witness agreement.

PARTIAL · 4/30

7. SEAL_ISSUED

4 / 30

SEAL badge minted, Ed25519 signature chain complete, ledger entry appended.

SEALed · 4/30

📅 Per-Category Lifecycle (5 categories × 30 MCPs)

Category 1 — Sensor (10 MCPs)

sentinel-hub-mcp · os-opendata-mcp · data-gov-uk-mcp · companies-house-mcp · ons-statistics-mcp · gdelt-news-mcp · openaq-air-mcp · aisstream-maritime-mcp · rtsp-camera-mcp · mqtt-bridge-mcp

REG
SBOM
RED
OWN
WIT
BFT
SEAL

States 1-4 cleared for all 10. Drift: 0. Next gate: WITNESS_ROTATED (Q3-2026 refresh due 2026-09-30).

5/7 PENDING · Q3-2026 refresh window

Category 2 — Defence (8 MCPs)

freetakserver-mcp · yolov8-mcp · px4-mavlink-mcp · openathena-mcp · mava-swarm-mcp · cesium-globe-mcp · jsp936-mcp · owasp-asi-mcp

REG
SBOM
RED
OWN
WIT
BFT
SEAL

4 SEALed (freetakserver, yolov8, px4-mavlink, openathena) · 4 Eligible (mava-swarm, cesium-globe, jsp936, owasp-asi).

8/8 READY · 4 SEALed + 4 Eligible

Category 3 — Civil Service (7 MCPs)

gov-uk-notify-mcp · gov-pay-mcp · gov-uk-auth-mcp · land-registry-mcp · hmrc-mtd-mcp · dwp-checker-mcp · nhs-spine-mcp

REG
SBOM
RED
OWN
WIT
BFT
SEAL

States 1-4 cleared for all 7. WITNESS_ROTATED window opens 2026-08-15. BFT vote requires 27/33 + UKDI co-sponsorship.

5/7 PENDING · UKDI co-sponsorship gate

Category 4 — Compliance (3 MCPs)

council-probe-mcp · witness-list-mcp · sbom-publisher-mcp

REG
SBOM
RED
OWN
WIT
BFT
SEAL

All 3 SEALed. Council-probe (tick-118), witness-list (tick-118), sbom-publisher (tick-117) — the council itself issues SEALs.

3/3 SEALed · self-issued

Category 5 — Core (2 MCPs)

defoneos-orchestrator-mcp · sovereign-keystore-mcp

REG
SBOM
RED
OWN
WIT
BFT
SEAL

States 1-4 cleared. WITNESS_ROTATED requires special quorum (R1+R3+R5). BFT vote requires constitutional 30/33.

5/7 PENDING · CONST 30/33 required

⏱️ Re-Qualification Windows (90-day cycles)

Each lifecycle state has a re-qualification window. After expiry, the MCP drops one tier. The windows are enforced by the witness rotation calendar (tick-119) and the freshness probe (tick-120).

Lifecycle State Re-qual Window Expiry Trigger Drift Penalty Recovery
REGISTERED ∞ (one-shot) Owner retract ↘ to ARCHIVED Owner re-register
SBOM_PUBLISHED 24h freshness STALE > 24h ↘ to REGISTERED Re-publish SBOM
REDLINE_SCANNED 7d New red-line vector ↘ to SBOM_PUBLISHED Re-run 7-vector scan
OWNER_COSIGNED ∞ (one-shot) Owner resign ↘ to REDLINE_SCANNED New owner cosign
WITNESS_ROTATED 90d 3-witness snapshot > 90d ↘ to OWNER_COSIGNED Re-run VRF rotation
BFT_VOTED 180d BFT motion > 180d ↘ to WITNESS_ROTATED New BFT motion
SEAL_ISSUED 365d SEAL > 365d ↘ to BFT_VOTED Re-issue SEAL

🚨 Drift Detection (Q1-Q3 2026)

Drift events occur when an MCP regresses from a higher lifecycle state. The DEFONEOS drift monitor scans every 6h. To date:

Total drift events

0

No MCP has regressed in any lifecycle state.

CLEAN · 0 events

Drift windows opened

7

7 windows opened due to pending witness refresh (26 MCPs × 1 window each = 26, grouped by Q3 batch).

7 OPEN · Q3 batch

Drift windows closed

0

All 26 pending MCPs awaiting Q3 witness rotation. No early closures.

0 CLOSED · awaiting

🛠️ 4-Step Curl Verification

# 1. Confirm 30 MCPs total
curl -sS https://www.csoai.org/defoneos-mcp-seal-eligibility-tracker.html | grep -oP '30 MCPs' | head -1

# 2. Confirm 4 SEALed (this page)
curl -sS https://www.csoai.org/defoneos-mcp-category-lifecycle-seal-drift-audit.html | grep -oP '4 SEALed' | head -1

# 3. Confirm 0 drift events
curl -sS https://www.csoai.org/defoneos-mcp-category-lifecycle-seal-drift-audit.html | grep -oP 'Total drift events.*?0' | head -1

# 4. Confirm 7 lifecycle states
curl -sS https://www.csoai.org/defoneos-mcp-category-lifecycle-seal-drift-audit.html | grep -oP 'Seven Lifecycle States|REGISTERED|SBOM_PUBLISHED|REDLINE_SCANNED|OWNER_COSIGNED|WITNESS_ROTATED|BFT_VOTED|SEAL_ISSUED' | sort -u | wc -l

🔗 Cross-Links