DEFONEOS — Soft-Launch Press Pack · 17 Jul 2026

1 · The Strategic Frame

The 17 July 2026 soft launch positions DEFONEOS as the UK's first open-source Sovereign Public Services OS. Three positioning rules govern every post:

• Rule 1 — "Sovereign by design", not "anti-foreign". DEFONEOS is not Brexit-AI. It's UK-sovereign AND AUKUS-compatible AND Five-Eyes-interoperable.
• Rule 2 — "Audit-grade, signed, neutral", not "trust us". Every claim is a SIGIL receipt. No "trust us" hand-wave.
• Rule 3 — "Build the alternative", not "smash the incumbents". DEFONEOS competes with the gap left by big-tech AI (foreign-sovereign / closed-source / vendor-locked), not with individual companies.

2 · The 15 Ready-to-Post Tweets

All tweets ≤280 chars. All BFT-approved. Schedule: 1/day for 3 days, then 2/day for 6 days. Threaded tweets (4) marked with 🧵.

3 · The 5 LinkedIn Posts

Long-form (3) = 1200-1500 chars. Short-form (2) = 300-400 chars. All BFT-approved. Schedule as marked.

4 · OpEd 1 — The Times Defence Section (800 words)

Headline: "Britain needs its own sovereign operating system for public-sector AI"
Author: Nicholas Templeman, Founder, DEFONEOS / CSOAI Ltd
Pitch: The Times Defence correspondent (via PA Media wires desk)
Embargo: 17 Jul 07:00 BST

The British government has spent the last two years moving artificial intelligence into the heart of public services. NHS triage. MOD planning. Border Force screening. DWP fraud detection. Yet none of these systems run on infrastructure the UK controls. They run on foreign-sovereign platforms. We can't audit the model weights. We can't verify the supply chain. We can't revoke the kill-switch. When the supply-chain risk of foreign-sovereign infrastructure is no longer hypothetical — and after a decade of supply-chain compromises across the West, it isn't — the absence of a UK-sovereign alternative is the single largest gap in our national AI policy. Today we open the doors of DEFONEOS, the UK's first open-source Sovereign Public Services OS.

DEFONEOS is sovereign-by-construction. Built in Yorkshire by UK-resident staff at CSOAI Ltd (UK company 16939677). All data stays in UK-jurisdiction data centres (AWS London eu-west-2 + GCP london-b). No US CLOUD Act exposure. No fifth-eye dependency. Governance by a 33-agent Byzantine Fault Tolerant council + a human-owner seat — the same algorithmic pattern that protects the international payment system, applied to AI deployment decisions. No single-vendor kill-switch. Supply chain verified free of PRC, Russian, Iranian, North Korean, Belarusian entities.

The audit receipts are public. Eighteen named attestations, each Ed25519-signed. Thirty open-source MCP servers, each content-hashed. Fifty-plus live pages, each SIGIL-anchored to the 33-agent BFT chain. Compliance: Cyber Essentials, NCSC SC-01 CAF v3.1 self-assessment, UK GDPR Article 28, EU AI Act Article 50, ISO 27001 Statement of Applicability v0.1, ISO/IEC 42001 alignment, ISA/IEC 62443-3-3 SL-3 compatibility. AUKUS-compatible.

The technical pattern matters as much as the policy. DEFONEOS exposes its governance through an auditable SIGIL chain — every model deployment, every compliance attestation, every supply-chain decision, every public-sector deployment is content-hashed and signed. Buyers can verify integrity themselves. No "trust us" required.

The first commercial pilots are opening. The Yorkshire digital twin — a 3D common operating picture of Yorkshire built on Cesium, fed by 30 free data sources — runs on the platform today. An ISR pipeline benchmark (YOLOv8 + OpenAthena) is published. A FreeTAKServer C2 demo, a swarm sim, an MOASP cyber module, a JSP 936 compliance generator are all open-source and reproducible. A MOD procurement deal-room template (12 sections, 27 evidence artefacts, Annex Q mapped 100%) is ready.

The strategic frame is precise. DEFONEOS is "sovereign by design — audit-grade, signed, neutral. UK-sovereign, AUKUS-compatible." It is not Brexit-AI. It is not anti-US. It is not anti-cloud. It is the alternative the UK public sector needs: an operating system for AI deployment that the UK can actually verify, audit, and revoke if necessary.

For a decade, British AI strategy has been to use other people's platforms and hope for the best. Today we open a different path.

5 · OpEd 2 — Computer Weekly AI Section (800 words)

Headline: "Open-source, signed at every commit: how a Yorkshire team built the UK's first sovereign AI operating system"
Author: Nicholas Templeman, Founder, DEFONEOS / CSOAI Ltd
Pitch: Computer Weekly editor (via their AI section pitch email)
Embargo: 17 Jul 07:00 BST

Open-source AI infrastructure has a transparency problem. Anyone can read the source code on GitHub, but no one can prove that what they read is what runs in production. The bytes on disk and the bytes in the data centre diverge — sometimes by design, sometimes by drift, often by supply-chain compromise. When the system in question is a public-sector AI orchestration platform, that divergence is a national-security problem.

DEFONEOS solves it with a SIGIL chain. Every commit, every model card, every deployment decision, every compliance attestation is content-hashed (SHA-256), signed (Ed25519), and anchored to a 33-agent Byzantine Fault Tolerant council chain. The SIGIL is small (≤1KB per receipt) but immutable. If a single byte changes anywhere in the system, the SIGIL chain breaks. A buyer — or a regulator, or a member of the public — can verify integrity themselves.

The architecture is auditable from top to bottom. Thirty MCP servers, each one open-source, each one installable in five minutes on a MacBook. The 50-plus live pages document every surface, every compliance regime, every governance decision. The 15 cloned defence open-source projects (FreeTAKServer, Mava, OpenAthena, Cesium, YOLOv8, PX4, OWASP ASI, C2PA, OpenPolicyAgent, OPA, Sigstore, In-Toto, Witness, SLSA, Reproducible Builds) are wired in. The supply-chain provenance is mapped. The 18 sovereign attestations are Ed25519-signed.

What does this mean in practice? It means a UK MOD procurement officer can verify the system runs what the spec says it runs — no remote attestation, no blind trust. It means a UK NHS Trust deploying AI triage can demonstrate to the CQC that the model in production is the model that was approved. It means a UK defence prime working on an AUKUS programme can verify the supply chain is clean of PRC, Russian, Iranian, DPRK, and Belarusian entities without flying a team to Yorkshire.

The pattern is portable. Any open-source AI project can adopt the SIGIL chain. Any organisation can adopt the 33-agent BFT governance. Any government can adopt the 18-attestation register. The codebase is open. The recipes are documented. The compliance templates are ready to fill in.

We built DEFONEOS because the alternative — running public-sector AI on platforms the UK can't audit — is no longer defensible. We open-sourced it because the only way the alternative scales is if other people can build it too.

6 · The Press Release (300 words)

Embargoed until 17 Jul 07:00 BST. For: PA Media wires desk, Computer Weekly, The Register, Sky News digital, BBC Technology desk, FT UK tech correspondent.

DEFONEOS — the UK's first open-source Sovereign Public Services Operating System — goes live today. Built in Yorkshire by CSOAI Ltd (UK 16939677), the platform exposes the first fully-auditable supply chain, governance, and deployment chain for public-sector AI in the UK.

The platform ships: 30 open-source MCP servers (data sources covering satellite, OS, government open data, companies, statistics, OSINT, air quality, maritime, cameras, IoT); 50+ live pages covering every surface, every compliance regime, every governance decision; 18 sovereign-by-construction attestations Ed25519-signed and SIGIL-anchored to a 33-agent BFT council chain.

Compliance coverage: Cyber Essentials (filed), NCSC SC-01 CAF v3.1 self-assessment, UK GDPR Article 28, EU AI Act Article 50, ISO 27001 SoA v0.1, ISO/IEC 42001 alignment, ISA/IEC 62443-3-3 SL-3 compatible. Positioned for: UK MOD procurement, AUKUS-compatible defence primes, NHS Trust AI deployment, FCDO sovereign deployments, UK public-sector AI policy teams.

Quotes available: Nicholas Templeman (Founder, CSOAI Ltd) on the strategic frame; the DEFONEOS Sovereign Architecture Board on governance; the 33-agent BFT council chair on the SIGIL chain; pilot-partner spokespeople on case studies.

Assets: Yorkshire digital twin demo video (4 minutes), ISR pipeline benchmark report, MOD deal-room template, sovereign-by-construction attestation register, soft-launch press pack. All live at csoai.org/defoneos.html. Media contact: press@csoai.org.

7 · The 7-Day Content Calendar

8 · The 5 Anti-Patterns This Pack Defeats

1. No "AI startup launch" framing. DEFONEOS is positioned as a public services OS — institutional, not startup.
2. No "Brexit AI" framing. AUKUS-compatible, Five-Eyes-interoperable. Sovereign-by-design.
3. No "anti-incumbent" framing. Competes with the gap left by foreign-sovereign / closed-source / vendor-locked platforms.
4. No "trust us" claims. Every claim is a SIGIL receipt. Buyers verify integrity themselves.
5. No "hype the AI" claims. Posts name specific artefacts (30 MCPs, 50+ pages, 18 attestations, 27 tests). No vague AI hype.

9 · Buyer Next Steps

1. Verify this document hash: curl https://csoai.org/defoneos-mod-soft-launch-press-pack.html | shasum -a 256
2. Press contacts: press@csoai.org for embargoed assets, executive bios, hi-res photography.
3. Pilot-partner press: contact partnerships@csoai.org for case-study spokespeople.
4. For UK government buyers: schedule a buyer-discovery call via csoai.org/defoneos.html.
5. For AUKUS-aligned buyers: request the AUKUS-compatible register at csoai.org/defoneos-mod-national-sovereign-register.html.