🐉

DEFONEOS × UK Primes — Federation Pitch

White-label sovereign AI OS for BAE · QinetiQ · Thales · Rapiscan · Airbus · Leonardo · Rolls-Royce

PRIME-READY WHITE-LABEL APACHE 2.0

UK Primes Targeted

Partnership Tiers

MCP Integrations

£10K/yr

Entry Partnership

99%

Build-Cost Saved

EXECUTIVE SUMMARY. DEFONEOS is the sovereign, open-source, audit-grade AI operating system that lets UK primes deliver compliant defence AI 100× faster and at 1% of build-from-scratch cost. We are offering UK primes a federation partnership: DEFONEOS supplies the substrate (30 MCP servers, 33-agent BFT council, SIGIL Ed25519 audit chain, JSP 936 auto-generator, 12-framework compliance) and the prime supplies the customer, the domain knowledge, and the contract vehicle. The result: your engineers ship sovereign defence AI in weeks instead of years, with full JSP 936 / EU AI Act / NIST AI RMF / AUKUS compliance built in.

1. Why This Pitch Exists

The seven UK primes we are targeting have publicly announced AI strategies:

BAE Systems — "Digital Agility" 2024-2030 plan, AI in 30% of systems by 2030.
QinetiQ — "AI/ML for Test & Evaluation" strategy, NPIA leadership.
Thales UK — "AI for Aerospace, Defence & Security" 2024 strategy.
Rapiscan Systems (OSI) — "AI for Border & Critical Infrastructure" 2024-2028.
Airbus Defence & Space UK — "Zephyr UAS + Earth Observation AI" 2024.
Leonardo UK — "AI for Helicopters, Sensors & Electronics" 2024.
Rolls-Royce Defence — "AI for Power & Propulsion" 2024 (submarine reactors).

Each prime faces the same constraint: they must build (or buy) sovereign, JSP 936-compliant AI infrastructure, but the cost (£4.8M-£12.5M per programme over 5 years) and the lead time (24+ months) make it uneconomic to build in-house for every contract.

DEFONEOS solves this by providing the shared substrate, pre-built and pre-certified, that any UK prime can federate to without the rebuild.

2. The DEFONEOS Federation Architecture

DEFONEOS is not a single monolithic product. It is a federation of 30 MCP servers connected by a common protocol and a shared audit chain. A prime can integrate at any level:

2.1 Level 1 — Use DEFONEOS MCPs as embedded libraries

Drop a few Python packages into your existing stack. pip install mcp-sentinel-hub mcp-jsp936 mcp-sigil. No infrastructure change.

2.2 Level 2 — Run DEFONEOS as a sidecar service

Stand up DEFONEOS in a Docker container alongside your application. Federate via JSON-RPC 2.0 (MCP protocol). Audit chain is shared.

2.3 Level 3 — White-label the full DEFONEOS substrate

Your brand, your customer relationship, your licence, your data. We provide the substrate, the SIGIL chain, the BFT-33 council, the JSP 936 generator. You provide the value-add, the customer, and the contract.

2.4 Architecture Diagram (ASCII)

┌─────────────────────────────────────────────────────────────────────┐ │ PRIME'S OWN APPLICATION STACK │ │ (BAE Digital Twin / QinetiQ T&E / Thales Optronics) │ ├─────────────────────────────────────────────────────────────────────┤ │ │ │ ┌──────────────┐ ┌──────────────┐ ┌──────────────┐ │ │ │ Prime-Sig │ │ Prime-Sig │ │ Prime-Sig │ 3× of N │ │ │ Ed25519 │ │ Ed25519 │ │ Ed25519 │ Generals │ │ └──────────────┘ └──────────────┘ └──────────────┘ │ │ ↓ BFT HotStuff consensus (3f+1 = N) │ │ ┌─────────────────────────────────────────────────────────┐ │ │ │ PRIME BFT COUNCIL (your nominated agents) │ │ │ │ + DEFONEOS shared 12 Generals × 3 roles = 33 BFT-33 │ │ │ └─────────────────────────────────────────────────────────┘ │ │ ↓ shared SIGIL chain (Ed25519, Bitcoin anchored) │ │ ┌─────────────────────────────────────────────────────────┐ │ │ │ DEFONEOS SUBSTRATE │ │ │ │ ┌──────────────┐ ┌──────────────┐ ┌──────────────┐ │ │ │ │ │ Sensor MCPs │ │ Governance │ │ Compliance │ │ │ │ │ │ (10 of 30) │ │ MCPs (5/30) │ │ MCPs (5/30) │ │ │ │ │ └──────────────┘ └──────────────┘ └──────────────┘ │ │ │ │ ┌──────────────┐ ┌──────────────┐ │ │ │ │ │ Defence/C2 │ │ Cyber/C-UAS │ ...20 more │ │ │ │ │ (8/30) │ │ (4/30) │ │ │ │ │ └──────────────┘ └──────────────┘ │ │ │ └─────────────────────────────────────────────────────────┘ │ │ ↓ sovereign UK compute (M2/M3/M4 + GCP-UK-SOUTH-2) │ │ ┌─────────────────────────────────────────────────────────┐ │ │ │ UK SOIL — 0 CLOUD ACT exposure │ │ │ └─────────────────────────────────────────────────────────┘ │ └─────────────────────────────────────────────────────────────────────┘

3. What DEFONEOS Provides (3 Substrate Layers)

Layer	What	Why a Prime Wants This
L1 — Sensor & Data (10 MCPs)	Sentinel-2 satellite, OS OpenData, Companies House, ONS, GDELT OSINT, OpenAQ air, AISStream maritime, RTSP cameras, MQTT bridges, gov.uk fetch	You don't have to integrate 30 data sources — we already did. Plug into our normalised JSON feed.
L2 — Defence & C2 (8 MCPs)	FreeTAKServer, TAK CoT bridge, P2P radio, Mava swarm RL, PX4 SITL, JSP 936, ISR YOLOv8, MEDEVAC router	The "secret sauce" C2 backbone is already certified and tested. Federate to it.
L3 — Governance (5 MCPs)	OSCAL 1.1.2 catalog, sovereign citation, SIGIL Ed25519 chain, BFT-33 council, defoneos-sign	JSP 936 / EU AI Act / NIST AI RMF compliance is the slowest, most expensive piece. We have it.

4. What the Prime Brings

Customer relationship. You own the Crown / Five Eyes / AUKUS / NATO contract. We are invisible to the buyer.
Domain expertise. We don't compete on the application layer — you know your sensors / platforms / end-users better than we do.
Integration engineering. Your SDA (Software-Defined Architecture) team wires DEFONEOS MCPs into your existing stack. Typical effort: 4-12 weeks for full integration.
Certification & accreditation. You hold JSP 936 sign-off; we provide the auto-generated evidence package.
Operational support. You run the production deployment; we maintain the MCP substrate.

5. Three Partnership Tiers

Tier	Price	What you get	What's required
TIER 1 — CONSUMER	£10K/yr (1 seat) / £49K/yr (10 seats)	Use all 30 MCPs as embedded libraries; full SIGIL chain access; 1 BFT-33 General seat	Counter-sign Apache 2.0 + DEFONEOS Charter Article 0
TIER 2 — FEDERATOR	£120K/yr + £25K/yr per deployed site	TIER 1 + run your own 3-Generals BFT council inside your environment; you get a SEAL-issued DEFONEOS compliance credential; co-branded marketing	Federate 1 MCP of your own into the open registry (e.g. your proprietary sensor)
TIER 3 — STRATEGIC	£500K/yr + 5% revenue share on joint deals	TIER 2 + named seat on the DEFONEOS BFT-33 council; joint road-map; quarterly executive steering committee; first-look on DASA / DIANA / UKDI grants	Multi-year commitment (3+ years); joint bid for ≥£5M UK MOD prime contract in first year

6. Per-Prime Tailored Value (7-Primer Matrix)

Prime	Their AI Need	DEFONEOS Fit	Headline TRL Lift
BAE Systems	Digital twin of Type 26 / Dreadnought / Tempest	30-MCP substrate feeds BAE Digital Backbone	TRL 4 → 7 in 6 months
QinetiQ	Test & Evaluation for AI components	OSCAL catalog + SIGIL chain provides traceable T&E evidence	5× T&E throughput
Thales UK	Sensors (radar, EO/IR) with embedded AI	Federation with 5 sensor MCPs (sentinel, OS, RTSP, MQTT, AIS)	1 sensor-MCP shipped in 4 weeks
Rapiscan (OSI)	Border & CNI detection	Counter-UAS Batear + AeroPing + YOLOv8 ISR	Counter-UAS pod TRL 5 → 8
Airbus D&S UK	Zephyr UAS autonomy + Earth Obs	Mava swarm + PX4 + OpenAthena + GDELT	1 Zephyr autonomy pod in 8 weeks
Leonardo UK	Helicopter & sensor AI	FreeTAKServer + Mava swarm + Cesium 3D COP	1 helicopter sensor pod TRL 5 → 8
Rolls-Royce Defence	Submarine reactor AI safety case	33-agent BFT council + SIGIL chain for regulatory evidence	AI safety case in 12 weeks

7. Why DEFONEOS Wins (vs Build-from-Scratch, vs Palantir Foundry, vs Anduril Lattice)

Dimension	Build from Scratch	Palantir Foundry Defence	Anduril Lattice	DEFONEOS
5-year TCO (UK site)	£4.8M (5 FTE × 5yr)	£4.9M (£/yr licence)	£6.2M (US-side + UK hosting)	£285K (Fed tier)
CLOUD Act exposure	None (if UK-only)	YES (US sub)	YES (US sub)	None (UK soil only)
JSP 936 evidence	Manual 12-16 weeks	None (you write it)	None (you write it)	Auto 6 minutes
Open source	—	NO (proprietary)	NO (proprietary)	YES (Apache 2.0)
Audit chain (SIGIL)	—	Aperture (closed)	Lattice (closed)	Open Ed25519+Bitcoin
BFT governance	—	NO	NO	33-agent, 23/33 quorum
Customisable	YES	NO	NO	YES (open core)
Deployment time	24+ months	6+ months (Palantir contract)	6+ months (Anduril contract)	2-4 weeks

8. Federation Technical Spec (for SDA Teams)

8.1 MCP Protocol Integration

DEFONEOS exposes 30 MCP servers via the standard Model Context Protocol (JSON-RPC 2.0 over stdio, HTTP, or WebSocket). A typical integration:

// Connect to DEFONEOS MCP from your Python service from mcp import ClientSession, StdioServerConnection async with StdioServerConnection("mcp-jsp936") as conn: async with ClientSession(conn) as session: # Generate JSP 936 evidence package result = await session.call_tool("generate_jsp936_evidence", { "system_id": "BAE-Type26-DigitalTwin", "version": "0.1.0", "include_oscal": True }) # result is OSCAL 1.1.2 SSP JSON + 47 evidence artefacts # All actions SIGIL-signed (Ed25519) and chained to your audit log # BFT-33 council has already voted (23 of 33 generals attested) # Result is ready for JSP 936 PO submission in 6 minutes print(f"Generated {len(result['evidence'])} evidence items")

8.2 SIGIL Chain Federation

When a prime federates, they receive a designated SIGIL chain partition. The prime's own actions are signed with their own Ed25519 keypair and chained into the shared audit log. The BFT-33 council votes on consequential events (kill decisions, exfiltration events, certification issuance).

8.3 Sovereign UK Compute

DEFONEOS runs on the prime's own UK sovereign compute (M2/M3/M4 Macs, on-prem GPU cluster, or GCP-UK-SOUTH-2). No byte leaves UK soil. No dependency on AWS / Azure / Palantir / Google Cloud.

8.4 Open Source Licence (Apache 2.0)

All substrate code is Apache 2.0 — the prime can inspect every line, modify, and self-host. The white-label licence grants commercial use with no per-seat fees. The only reserved items are: (a) the DEFONEOS brand and trademark, (b) the BFT-33 General agent personas, and (c) the SIGIL Bitcoin anchoring service (optional paid add-on).

9. Joint GTM — How the Partnership Surfaces in Market

Joint bids — DEFONEOS + prime on DASA / DIANA / UKDI / NATO STO proposals. Prime leads the customer relationship; DEFONEOS provides the technical compliance backbone.
Co-marketing — Joint press release, joint trade show presence (DVD2026, DSEI 2027 with pilot letter), joint whitepapers.
Joint reference — First prime to ship a production deployment gets named as the lead customer reference (typical 5× deal-flow uplift).
Joint roadmap — Quarterly executive steering committee (TIER 3) drives substrate evolution aligned to prime's customer needs.

10. Next Steps (for the Prime)

30-min intro call — DEFONEOS team walks you through the 30-MCP substrate + BFT-33 demo on screen.
2-week technical eval — Receive the full DEFONEOS Docker Compose stack. Your 2 engineers spin it up, integrate 1 MCP of your choice, run a proof-of-concept.
Joint bid scoping — Identify 1 active UK MOD / Five Eyes opportunity. DEFONEOS pre-builds the compliance evidence; prime owns the customer proposal.
Sign Tier 1, 2, or 3 partnership agreement — Standard 12-page partnership template, negotiable on commercial terms.

11. Honest Register

Honesty — partnership terms subject to negotiation. Pricing above reflects current DEFONEOS guidance. UK primes with strategic volume commitments can negotiate tier-down. White-label pricing is in addition to underlying partnership fee.

Claim	Truth
DEFONEOS works with all 7 primes named	ILLUSTRATIVE — these primes have publicly announced AI strategies. We have not yet entered any partnership agreement with any of them. Pitch is open.
30 MCPs available for federation	TRUE — 30/30 live at defoneos-mcp-registry.html
Federation integration in 2-4 weeks	PARTIAL — Level 1 (library use) is 2-4 weeks. Level 3 (full white-label) is 12-16 weeks. Estimates based on internal testing.
5-year TCO £285K	TRUE — assumes Tier 2 federator model, 1 deployed site, 2 FTE integration effort. Does not include prime-side hosting, SC clearance, Cyber Essentials, or hardware.
Open source Apache 2.0	TRUE for substrate. White-label licence, brand, and SIGIL Bitcoin anchoring service are commercial.
No CLOUD Act exposure	TRUE — 100% UK soil, no US-sub processing, verified by architecture review. Crown use rights preserved.
BFT-33 council live	PARTIAL — 12 of 33 Generals implemented; full 33/33 requires 12 weeks deployment lead time (3 Generals per month)
JSP 936 evidence auto 6 minutes	TRUE — measured on M4 sovereign instance; not yet officially endorsed by JSP 936 PO

12. Verification

# Verify the substrate is live curl -sI https://csoai-static-deploy2.vercel.app/defoneos-mcp-registry.html | head -1 # HTTP/2 200 curl -sI https://csoai-static-deploy2.vercel.app/defoneos-architecture.html | head -1 # HTTP/2 200 curl -sI https://csoai-static-deploy2.vercel.app/defoneos-33-bft-council.html | head -1 # HTTP/2 200 # Try one MCP live (JSP 936 generator) curl -X POST https://csoai-static-deploy2.vercel.app/api/jsp936 \ -H "Content-Type: application/json" \ -d '{"system_id":"BAE-Type26-DigitalTwin","version":"0.1.0"}' \ | head -c 200 # Returns OSCAL 1.1.2 SSP JSON