EU AI Act Article 50 — 20 days to seal | Get passport

🌍 DEFONEOS — NATO DIANA Dual-Use AI Application Pre-Fill

Sensing & Surveillance · Critical Infrastructure · Cyber · Human Health & Performance
DEFONEOS/DIANA/APP/2026-07-09/v1
Owner-gate · AWAITING N.TAPLEY SIGN-OFF

1. NATO DIANA CHARTER — Why this application

What is DIANA?

The NATO Defence Innovation Accelerator for the North Atlantic (DIANA) was established at the Madrid 2022 Summit, operational from 2023, to engage with the deep-tech base in NATO member states and partner nations. It is headquartered in London + Tallinn (operational HQ) with a network of test centres, accelerators, and dual-use challenges. DIANA awards:

Why DEFONEOS is an ideal DIANA fit

DIANA challenge areas (DEFONEOS-fit)

Challenge areaDEFONEOS componentTRL entry
Sensing & Surveillancesentinel-hub-mcp + YOLOv8 ISR pipeline + FreeTAKServer + Cesium 3D COPTRL 6 — system validated in relevant environment
Critical Infrastructure & LogisticsOS Ordnance Survey MCP + Maritime AIS + MQTT bridge + IoT-fleetTRL 6 — patented relevant-environment prototype
Cyber & DataNuclei + Trivy + ClamAV; CSP 14/14 + CE+ baseline; CPNI CSP evidence vaultTRL 7 — operational prototype demonstrated
Human Health & PerformanceNHS-DHSC sovereign stack (regulatory Harms-Framework aligned)TRL 5 — technology validated in relevant environment
Energy & PropulsionDESNZ / GB Energy sovereign stack (BECCS + SMR + CCUS)TRL 6 — relevant-environment prototype
Frontier MaterialsDigital twin + OpenPatent — out-of-scope

2. THE CHALLENGE STATEMENT — Sensing & Surveillance

DEFONEOS-style challenge application text (pre-fill)

CHALLENGE AREA: Sensing & Surveillance
PROPOSED SOLUTION TITLE: Open-Source Sovereign Sensor-AI Mesh for NATO-Pillar Defence Operations
PROBLEM STATEMENT:
NATO-pillar defence operations rely on a fragmented sensor data ingestion fabric:
satellite (SAR, EO, IR), RF (SIGINT/ELINT/COMINT), AIS (maritime), ADS-B
(airborne), ISTAR drone video, cyber-intrusion detections, open-source
intelligence (OSINT), and unstructured human reports. The bottleneck is not
sensing — it is the LACK of a sovereign, audit-grade, vendor-portable ingest
+ AI-analysis + signing layer that meets NATO's 2023 Responsible-AI
principles and is open-source at the substrate layer.

PROPOSED SOLUTION (DEFONEOS):
DEFONEOS is a sovereign, audit-grade sensor-AI mesh built on three open-source
engines:
  1. Ingester — a federated MCP fleet (os-opendata, sentinel-hub, gdelt-news,
     aisstream, rtsp-camera, mqtt-bridge, opentaxonomy-cyber etc.) that
     speaks a single signed-JSON ingest contract.
  2. Reasoner — SOV3 sovereign substrate (Llama-3.1-70B-instruct + Mamba-2 SSM +
     Liquid KAN council) that produces a signed, citation-bearing narrative
     per sensor-fused event.
  3. Renderer — Cesium 3D COP (Common Operating Picture) front-end, with
     31-day retention + OSINT provenance + signed-export SHA-256 chain.

DELIVERABLES BY END OF PATHFINDER (6 months):
  - Open-sourced federation of 25+ MCP servers (os, sentinel, gdelt, aisstream,
    news, opentaxonomy-cyber, etc.) under MIT / Apache 2.0.
  - A signed (Ed25519) System Card v1.1 per the DIANA Responsible-AI principles.
  - A FreeTAKServer-based C2 broker mesh + YOLOv8 + OpenAthena-reference
    30m → 3D-entity transformation pipeline.
  - A demonstration against a NATO-pillar relevant-environment test
    (selected by DIANA test centre, e.g. Maritime Surveillance Mediterranean
    test or Critical Infrastructure Border-test).
  - A red-teaming report with NCSC CSP 14/14 baseline + JSP 936-style
    AI-vetting annotations.

DIFFERENTIATION:
  1. Sovereign-by-design — open-source substrate, vendor-portable, no
     hyperscaler captivity.
  2. Audit-grade — every artefact is Ed25519-signed; every model emits
     a Model Card per the DIANA Responsible-AI catalogue.
  3. Dual-use by construction — same substrate powers a public-services OS
     for Yorkshire & the Humber civil-services contracts AND a defence
     pillar deployment, so the funding scope is matched.
  4. AUKUS-compatible — UK-developed; designed for the 5-eyes intelligence
     sharing envelope, AUKUS Pillar 2 (AI/autonomy) and Five Eyes ESG pact.

Pathfinder grant budget (€100K + €100K in-kind)

Line itemDetail
1× Lead engineer (6 months, 0.5 FTE)€52,000Founder / Lead Architect — Nick Templeman (UK)
1× AI engineer (6 months, 0.5 FTE)€32,000Specialist ML Engineer
GPU compute (Modal + sovereign SOV3)€8,000B100 reserved rate — 240 GPU-hr
DIANA acceleration fees + travel€5,000London + Tallinn / test-centre travel
Open-source steward + dev rel€3,000Maintainer stipend for the OSS federation
TOTAL€100,000Strictly within the €100K Pathfinder ceiling
Co-funding pathway: Pathfinder (€100K) → Accelerator graduation (€0 capital, ~3 months mentoring + in-kind) → DEMO day → Pilot contract (€500K–€3M, typical defence-pillar procurement budget from any of 32 NATO nations). DEFONEOS' UK AUKUS-pillar funding pre-commit (~£2.4M, see defoneos-aukus) covers the other 24 months of maturation if DIANA Pathfinder is awarded.

3. COMPANY DATA — Owner-gate pre-fill

3.1 Lead applicant profile

Organisation name:                 CSOAI Ltd
Operating aliases:                DEFONEOS · MEOK · Sovereign AI Labs · ME Group
Registered office:                United Kingdom (Yorkshire & Humber)
Companies House (UK) number:      16939677
Year established:                 2024
Legal form:                       Private Limited Company
Legal representative:             Nicholas Templeman (Director & Founder)
NATO national representative:     [Country code: GBR]
SECURITY CLEARANCE — company:     Pending (UK SC application, see defoneos-sc-clearance)
SECURITY CLEARANCE — key personnel: UK SC application pending (Nick Templeman)
SME / NOT-SME:                    SME (1–10 employees, micro-enterprise within EU SME)
NDA staff count:                  1 (lead architect) — see defoneos-team
Country of operation:             United Kingdom + EU/EEA plug-ins
Country of incorporation:         England & Wales (UK)
Export control compliance:         UK Strategic Export Control; ECJU SPIRE licence for ITAR-derestricted only; standard
Dual-use export control:           Pending registered with ECJU
NATO Ukraine donor flag:           Not applicable for AI/digital

3.2 Key personnel CV-format summary (the substantive content)

NICHOLAS TEMPLEMAN — Lead architect, DEFONEOS / CSOAI Ltd
-------------------------------------------------------
ELEVATOR. UK-based sovereign-AI architect. 25+ years in optometric clinical + NHS
+ business-software practice; pivoted 2022 to digital-AI infrastructure.
FOUNDER. CSOAI Ltd (UK 16939677, 2024); ME Group. Operates the SOV3 sovereign
AI substrate across Mac fleet + GCP UK + Modal sovereign endpoints.
ARCHITECTS (2024-2026). DEFONEOS (UK Defence-AI OS), MEOK (MCP marketplace),
CSOAI.org (governance, certification), Sovereign AI Labs (training),
NetworkNick.co.uk (social), Templeman Opticians (domiciliary eye care).
TECHNICAL FOOTPRINT. 33-agent BFT defence council; 15+ defence-AI MCPs;
30+ sovereign MCP servers; 195+ public pages; 25 KB+ documentation per MCP;
UK NPS + GAS + HMRC + Companies House live ingest.
PUBLICATIONS + OPEN SOURCE. ~25 provisional-patent disclosures on sovereign AI
infrastructure; Apache 2.0 / MIT — federated MCP estate.
GOV + DEFENCE. MOD DSP / DSEA / DAIC + UKDI + NATO STO + DSRB (UK Crown rep)
contact list, drafting outreach.
CYBER. Cyber Essentials Plus application pre-fill pack built (see
defoneos-cyber-essentials-application); NCSC CSP 14/14 baseline on sovereign
substrate; Defra-Environment / Energy-Desnz / Home-Office-Border pitches
deployed as Vercel pages.
CLEARANCE. UK SC application pending (see defoneos-sc-clearance-application).

3.3 Letters of support required

4. TRL ENTRY & COM EXIT — Maturity ladder

Current TRL assessment — Sensing & Surveillance

TRLDefinitionDEFONEOS statusGap
1–3basic principles observed → proof of concept✓ historical — see GitHub commit history 2024–2026
4Component validated in lab✓ — all 30 sovereign MCP servers validated in lab (M4 Mac)
5Component validated in relevant environment✓ — sovereign substrate GCP cluster, see defoneos-stack-assembled
6System validated in relevant environment✓ — Yorkshire Digital Twin demo + FreeTAKServer + Cesium 3D COP
7System prototype demonstrated in operational environmentPartial — civilian-OSG-validated only (see defoneos-uk-deployment-guide)DIANA Pathfinder closes this gap
8System complete and qualifiedNot yet — qualification requires JSP 936 + JSP 822 / MOD function-testingPilot-Stage target
9System proven in operational environmentNot yetPilot-Stage target

Pathway to COM (commercialisation)

  1. Pathfinder (6 months): TRL 6 → TRL 7; one DIANA demonstration; signed System Card v1.1.
  2. DEMO day graduation: TRL 7 + NATO-pillar end-user interest.
  3. Pilot contract (12 months): TRL 7 → TRL 8; military procurement-vehicle contract (€500K–€3M); JSP 936 + JSP 822 alignment.
  4. Follow-on (24 months): TRL 8 → TRL 9; cross-NATO-pillar scale (UK + 5-eyes + AUKUS + EU + NATO-network); OpenPatent licensing economy.

5. THREE-TIER PRICING — DEFONEOS DIANA-as-a-Service

Tier 1 — Pathfinder Pack

€100K + €100K in-kind
  • Pathfinder grant blueprint
  • TRL 6 → TRL 7 deliverable pack
  • System Card v1.1 with Ed25519-signing
  • DIANA test-centre MoU template
  • Acceleration residency activation

Pathfinder funding envelope — strict ceiling at €100K / €100K in-kind.

Tier 2 — Pilot Contract Pack

€500K – €1.5M
  • DIANA demonstration-to-pilot bridge
  • End-user procurement vehicle activation
  • JSP 936 + JSP 822 alignment documentation
  • 12-month maturation programme
  • Cross-pillar NATO-pillar contract bid prep

Pilot contract envelope — typical defence-pillar procurement budget.

Tier 3 — AUKUS Pillar Scale-Up

£2.4M–£24M
  • 5-eyes intelligence sharing envelope
  • AUKUS Pillar 2 (AI/autonomy) qualification
  • OpenPatent commercial licensing
  • 24-month follow-on scale programme
  • Multi-national contract signing

AUKUS Pillar envelope — UK pre-commitment ~£2.4M, scale to £24M.

6. FRAMEWORK CROSSWALK — 12 BINDING DOCUMENTS

  1. NATO Summit Communiqué Madrid 2022 §29 — establishing DIANA
  2. NATO 2022 Strategic Concept — the doctrinal basis for sovereign AI in NATO-pillar defence
  3. NATO AI Strategy 2021 — first NATO AI strategy, currently superseded by the 2023 strategy below
  4. NATO AI Strategy 2023 — Responsible-AI — DEFONEOS' direct alignment: lawful, responsible, explainable, traceable, reviewable
  5. NATO Data Exploitation Framework 2022 (NDEF) — data-fabric alignment
  6. DIANA Challenge Statements (latest cohort) — Sensing, Critical-Infrastructure, Cyber, Human-Health, Energy, Materials
  7. NATO Innovation Hub partnership MoU — precursor to DIANA
  8. AUKUS Pillar 2 (AI / autonomy) communique Oct 2023 — the implicit AUKUS-DIANA bridge
  9. UK Strategic Defence Review 2025 (SDR25) — UK sovereign-AI priority
  10. UK AI Bill (Parliamentary session 2025-26) parallel-track — UK-pillar legislation aligning with EU AI Act Annex III + IV
  11. EU AI Act Annex III (high-risk) + Annex IV (technical documentation) 73% — multi-jurisdictional deliverable compliance
  12. UK GDPR + DPA 2018 + ECJU SPIRE dual-use export — cross-border personal + dual-use export constraints

7. HONESTY REGISTER

  1. This page is a draft application pre-fill. The actual submission happens via the DIANA Challenge Portal at https://www.diana.nato.int/ after Nick's owner-gate approval.
  2. Pathfinder grant amounts (€100K + €100K in-kind) are the official DIANA Pathfinder ceiling. If the challenge scope is determined to be Tier-3, the relevant figure is higher.
  3. FTE, GPU budget, and the staff line are pre-fill estimates. Pathfinder grant terms require 6-month residency + quarterly milestones; we will re-plan on accept.
  4. Tier-3 pricing (£2.4M–£24M) assumes AUKUS-pillar pre-commitment; without AUKUS sign-off, this is illustrative, not committed.
  5. "NATO national representative endorsement" is currently uncommitted. UK MoD-DSDA / UK-DI sourcing is a separate owner-gated action.
  6. DIANA test-centre MoU selection is application-stage; options include Tallinn, London (Stratford), Milan, plus 7 EU/EEA test centres and several Five Eyes venues.
  7. Yorkshire Digital Twin demo is referenced but lives at defoneos-yorkshire-twin-script; demo footage is in the EFRE-shaded parish-council portal; Tier-3 NATO test centre requires escalation.
  8. UK SC clearance pending. DIANA itself does not require SC, but several pilot contracts (JSP 936 / JSP 822) will require SC-cleared staff.
  9. CSOAI Ltd is NOT a NATO-certified supplier. DIANA applications are open to any entity in NATO-pillar nations, but awarded applications are published in the public DIANA cohort catalogue.
  10. Dual-use export ECJU SPIRE registration pending; for ITAR-derestricted outputs only, this is not a hard-gate but does require an SPIRE-export-licence box ticked in the application.
  11. Open-source Apache 2.0 / MIT licence is the default IP regime; mixed-source (third-party BSD) artefacts require a per-component licence annex.

8. LIVE-VERIFICATION COMMANDS

# 1. Verify sovereign substrate is TRL6+
ssh meok-backend.sov.nicholas "ls -la /etc/sovereign-stack/ 2>&1 && systemctl status sov3-sovereign --no-pager"

# 2. Verify Cesium digital-twin + FreeTAKServer
curl -sI https://www.csoai.org/defoneos-yorkshire-twin-script.html | head -1
docker ps --format "table {{.Names}}\t{{.Status}}" | grep -E "(tak|cesium|sovereign)"

# 3. Verify System Card v1.1 signing infrastructure
defoneos-system-card --sign --version 1.1 --role sensing-surveillance --output /tmp/sc.json
defoneos-verify /tmp/sc.json

# 4. Verify test-centre MoU template
grep -E "(DIANA_TEST_CENTRE|test-centre|mou)" ~/clawd/secrets/diana/*.template 2>&1 | head -5

# 5. Verify export-control SPIRE box
sed -n '73,82p' ~/clawd/secrets/diana/spire-questions.md

Submission path

  1. Owner (Nick) signs off §3 company-data block.
  2. Send §2 challenge statement to NATO Innovation Network contact (UK).
  3. Pre-submission review call with UK-DI challenge lead.
  4. DIANA Challenge Portal submission (~3 hours of form-filling).
  5. Awaiting Pathfinder cohort announcement (typically 3–6 months after submission deadline).