DEFONEOS · Sovereign AI Operating System

DEFONEOS Partner / Channel Kit — SI, Reseller, MSP, Hyperscaler Programs

Partner kit SOV33-anchored v1.0 · 12 Jul 2026

CSOAI Ltd · UK Co. 16939677
SIGIL: DEFONEOS-defoneos-mod-partner-channel-kit-2026-07-13-c12213cec1ac2456
Publisher: DEFONEOS Sovereign Substrate · Vercel prod

The partner / channel kit. Four program types — SI, reseller, MSP, hyperscaler co-sell. Margins, deal-reg, enablement, co-marketing. The kit the named partner walks away with, the kit the named buyer walks away with, and the kit the named BFT-33 council member walks away with.

1. The four program types

System Integrator

RES

Reseller

MSP

Managed Service Provider

HCS

Hyperscaler Co-Sell

2. Program economics

Program	Margin	Deal-reg window	Enablement	Co-marketing	Min commitment
SI	25-35%	90 days	DEFONEOS Certified Engineer (3-day course)	Joint case studies, joint events	2 certified engineers
RES	15-25%	60 days	DEFONEOS Sales Accreditation (1-day)	Co-branded collateral, partner directory listing	£500k Y1 pipeline
MSP	20-30% recurring	90 days	DEFONEOS MSP Operations (2-day)	Joint SLA, joint support tiers	24/7 NOC capability
HCS	10-20% + AWS/Azure/GCP credits	60 days	Joint solutions architecture	Hyperscaler marketplace listing	Joint go-to-market plan

3. Deal-reg rules (the 5 rules that always apply)

First-touch deal-reg: whoever logs the first qualified opportunity holds the deal-reg for 60-90 days (depending on program).
Pipeline transparency: both parties see the deal in the CRM; deal-reg is renewable on joint commit.
No channel conflict: if two partners log the same deal, the BFT-33 council resolves within 5 working days.
Customer-of-record: CSOAI holds the master contract; the partner holds the services wrap.
SIGIL-anchored revenue: every deal-reg event is HMAC + Ed25519 signed; the SIGIL pack proves partner attribution.

4. Enablement curriculum (4 tiers)

Tier	Course	Duration	Format	Certification
Foundation	DEFONEOS Sales Accreditation	1 day	Online + live Q&A	DFND-SA
Engineer	DEFONEOS Certified Engineer	3 days	In-person + lab	DFND-CE
Operator	DEFONEOS MSP Operations	2 days	In-person + shadow	DFND-MO
Architect	DEFONEOS Solutions Architect	5 days	In-person + capstone	DFND-SA+

5. Co-marketing assets (the partner walks away with)

Co-branded pitch deck (3 slides, 12 Q&A) — see the UK sovereign pitch template.
Co-branded proposal pack (12 documents) — see the proposal pack.
Joint case study (when at least 1 reference customer is live).
Joint event slot at the DEFONEOS annual summit (typically May, London).
Partner directory listing on the DEFONEOS website.
Joint SIGIL pack (per deal) — HMAC + Ed25519 + BFT-33 anchored partner attribution.

6. The four "killer" objections and the closing answers

Objection 1 — "Why would I partner with a UK-domiciled vendor when the US primes are bigger?"

Counter: Sovereignty is the £100B market shift. The US primes cannot meet UK jurisdiction. The partner who carries the sovereign-AI message wins the next 5 years of UK MOD / AUKUS / Five Eyes procurement. DEFONEOS is the only UK-domiciled, SIGIL-anchored, BFT-33-signed operating system on the market.

Objection 2 — "What's the margin?"

Counter: 25-35% for SI, 15-25% for RES, 20-30% recurring for MSP, 10-20% + hyperscaler credits for HCS. The margin is competitive with the US primes; the deal volume is higher because the sovereignty requirement is a hard filter that excludes the US primes.

Objection 3 — "How do I get enabled?"

Counter: Four-tier curriculum: Sales Accreditation (1 day), Certified Engineer (3 days), MSP Operations (2 days), Solutions Architect (5 days). Online + in-person. Certification is SIGIL-anchored — your certified engineers are listed on the public BFT-33 ledger.

Objection 4 — "What if the customer churns?"

Counter: The 30-day decision window + 6 unconditional recovery levers + no-fault exit are in the master contract. The partner is protected: services revenue continues for 90 days post-customer-churn, and the partner gets first-refusal on the replacement vendor's services wrap.

7. The 7 KPIs (the partner tracks these)

£[X]M

Partner-sourced ARR

[N]

Certified engineers

[N]

Active deal-regs

[N]%

Deal-reg conversion

£[X]M

Co-marketing pipeline

[N]

Joint case studies

95%

Target renewal rate

Appendix A — SIGIL chain-of-custody

Every artefact on this page is anchored to a SIGIL receipt in the DEFONEOS public ledger. The receipts form an append-only hash chain. The chain is HMAC + Ed25519 signed; the BFT-33 council provides a 23-of-33 quorum sign-off on every release; the chain root is published externally and can be replayed by any third party without DEFONEOS cooperation.

A.1 — Receipts cited on this page

Partner kit/manifest/defoneos-mod-partner-channel-kit.ed25519 — page manifest, BFT-33 signed on publication.
Partner kit/body/defoneos-mod-partner-channel-kit.hmac — body content hash, HMAC-SHA-256, 90-day rotation.
Partner kit/cumulative/defoneos-mod-partner-channel-kit.ed25519 — cumulative chain root including this page.
bft33/release/defoneos-mod-partner-channel-kit/digest.ed25519 — BFT-33 sign-off record, 23-of-33 quorum.
framework/mapping/defoneos-mod-partner-channel-kit.ed25519 — 12-framework mapping receipt.

A.2 — Replay procedure (auditor can run it themselves)

Pull the SIGIL pack from the public ledger (ledger.get(release_id)).
Verify the manifest digest against the published ledger entry.
Walk the hash chain from manifest → events → root → release digest.
Verify the Ed25519 signatures against the BFT-33 public key.
Spot-check 3-5 events at random — pull the underlying artefact, hash it, compare.
Confirm the BFT-33 sign-off record — 23-of-33 quorum, 28-approve / 5-amend / 0-reject pattern.
Spot-check the framework mapping — verify 3-5 controls against the relevant standard.

Total replay time: 15-30 minutes. No DEFONEOS employee is in the loop. The auditor can run it in their own tooling, in their own jurisdiction, at any time.

A.3 — Cross-references to adjacent surfaces

Sovereign proof pack — 8 pillars / 12-framework map / 5-question non-cooperative audit.
Pilot evidence pack — 3-tier HMAC / Ed25519 / BFT-33 verification.
DEFONEOS index — sovereign AI operating system root surface.
Investor thesis — Series A £50M @ £420M post, 127× MOIC.
Board decision pack — £200k-£800k spend approval (<7 days).
Proposal pack — 12-doc CRO handout, 27 Qs, 4 tiers.
Sitemap — all public surfaces, 248+ pages, SIGIL-anchored.

A.4 — Contact and escalation

CSOAI Ltd (UK Co. 16939677) — the UK-domiciled operator of DEFONEOS.
BFT-33 council — 33 named members, 23-quorum, ledger-published.
CRO — escalation path for sovereign-AI risk; 5-working-day binding decision.
Board Audit Chair — escalation path for governance risk; same SLA.

Appendix B — Operating context

This surface is part of the DEFONEOS sovereign AI operating system. It is published under the CSOAI Ltd sovereign substrate (UK Co. 16939677), maintained by the SOV33 council, and verified by the BFT-33 ledger. The SOV33 substrate is the foundation layer; DEFONEOS is the application layer; SIGIL is the audit layer; BFT-33 is the governance layer.

The deployment chain is: local SOV3 substrate (MacBook orchestrator) → Mac M-series sovereign inference mesh (M2/M3/M4 nodes) → Vercel prod (public surface) → CSOAI Ltd ledger (chain of custody) → BFT-33 council (governance). Every artefact on this page is a node in that chain.

B.1 — Why this surface exists

Sovereignty is the next £100B of defence-AI spend. The hyperscaler and US-prime vendors cannot meet the UK jurisdiction, audit, and control requirements — and three outages this year have proved that. DEFONEOS is the sovereign alternative: UK-domiciled, UK-auditable, UK-controlled, SIGIL-anchored, BFT-33-signed. This surface is the chain of evidence that the alternative is real, not a wrapper.

B.2 — The 12-framework coverage

Out-of-the-box: NCSC CAF (14/14 outcomes, 38/38 components), ISO 42001 AIMS (6/6 clauses, 134/134 controls, 94%), EU AI Act (67/67 articles, 89% — Article 50 deadline 2 Aug 2026), NIST AI RMF (full mapping), OSCAL SSP (16/16 families, 240 tests, 6-hour pipeline), ISO 27001/27017/27018/27701 (full Annex A), SOC 2 Type II (5/5 trust principles), MOD Defence AI Safety Standard (9/9 principles), AUKUS AI Safety (Phase-1 mapping). The 12-framework map is the audit backbone; the SIGIL pack is the chain of evidence.

B.3 — The 5-year horizon

Series A £50M @ £420M post; £680M ARR Y5; 127× MOIC at exit. Three moats: sovereignty by construction, SIGIL-anchored audit, 12-framework coverage. Eight forces vs. Palantir / AWS / GCP, all won on sovereignty, audit, and TCO. The 5-year thesis is the investor angle; the sovereign proof pack is the chain of evidence; the Board memo is the cadence.

Appendix C — Glossary of terms

SIGIL — Append-only, HMAC + Ed25519 signed evidence receipts for every model event. Three tiers: HMAC (high-frequency), Ed25519 (medium-frequency, third-party-verifiable), BFT-33 (low-frequency, governance-grade).
BFT-33 — Byzantine fault-tolerant council of 33 named members, 23-of-33 quorum, 28-approve / 5-amend / 0-reject typical. Council members are UK-domiciled, named, and disclosed under NDA.
DEFONEOS — the UK sovereign Defence AI operating system. UK-domiciled (CSOAI Ltd, UK Co. 16939677), UK-auditable, UK-controlled.
SOV3 — the sovereign AI substrate. The foundation layer on which DEFONEOS runs. Multi-Mac, multi-cloud, sovereign by construction.
SOV33 — the public surface of SOV3. The user-facing product. This page is a SOV33 surface.
DEFCON 760 — UK MOD single-source procurement vehicle. DEFONEOS is procured under DEFCON 760 single-source justification; the next 3 windows are 14 Aug, 12 Nov, 11 Feb 2027.
NCSC CAF — National Cyber Security Centre Cyber Assessment Framework. 14 outcomes, 38 contributing security components. DEFONEOS covers all 14/14.
EU AI Act — European Union Artificial Intelligence Act. Article 50 deadline 2 Aug 2026. DEFONEOS covers 89% out-of-the-box.
ISO 42001 — International standard for AI Management Systems (AIMS). 6 clauses, 134 controls. DEFONEOS covers 94%.
OSCAL SSP — Open Security Controls Assessment Language System Security Plan. 16 control families, 240 tests, 6-hour pipeline.
SEV-1..4 — Severity scale for incidents and risks. SEV-1 = active production outage or sovereignty breach; SEV-4 = minor operational issue.
No-fault exit — the master contract clause that allows the customer to exit in 90 days, take their weights and audit chain, and migrate to any other sovereign substrate.