🏛️ OS 🔌 Integration 📡 FreeTAK 🔐 Security

🔌 Protocol Interoperability — Layer 0

DEFONEOS speaks every language. MCP for AI agents. A2A for agent-to-agent. CoT/TAK for battlefield C2. STANAG for NATO. Link 16 for tactical data links. Zero vendor lock-in.

Layer 0 Protocols

MCP, A2A, x402, DID, JWT, ANP, AGNTCY, IBC, OIDC, WebSocket, gRPC

Military Standards

CoT/TAK, STANAG 4817, Link 16, VMF, ADS-B

Civilian Standards

AIS, MQTT, REST, WebSocket, gRPC, GraphQL, STOMP

Proprietary Lock-in

Every protocol is open standard. No vendor tax. No export restrictions.

🏗️ Protocol Stack

⚔️ Military Interop

🤖 AI Agent Protocols

📊 Compatibility Matrix

💻 Code Examples

🏗️ The DEFONEOS Layer 0 Protocol Stack

Every system needs a lingua franca. DEFONEOS uses 11 open protocols at Layer 0 — the foundation that lets every component talk to every other component, and to external systems. No proprietary APIs. No vendor lock-in.

Application — Cesium Globe, Dashboards, C2 Interfaces

The user-facing layer. 3D common operating picture (Cesium), tactical dashboards, FreeTAKServer C2 console, compliance reporters. All web-based, all open source.

Presentation — SIGIL + Ed25519 + JSP 936

Cryptographic presentation layer. Every action is SIGIL-signed. Compliance assertions attached. Audit trail maintained.

Session — A2A (Agent-to-Agent) + ANP

Agent Network Protocol for multi-agent session management. Google A2A spec for cross-platform agent discovery and task delegation.

Transport — WebSocket + gRPC + STOMP

Real-time bidirectional WebSocket for live data. gRPC for high-performance inter-service. STOMP for message queue integration.

Network — CoT/TAK + Link 16 + VMF

Cursor on Target (CoT) for battlefield situational awareness. TAK protocol for ATAK/WinTAK/iTAK interoperability. Link 16 and VMF for tactical data links.

Data — MCP (Model Context Protocol)

The core integration layer. 30 MCP servers expose all sensor data, intelligence, and tools to any AI agent or framework. MCP is the universal adapter.

Identity — DID + JWT + OIDC + x402

W3C Decentralised Identifiers for sovereign identity. JWT for auth tokens. OIDC for SSO. x402 for payment/micropayment routing.

Physical — TCP/IP + Radio + Serial + CAN bus

The wire. Standard TCP/IP for network. Radio frequency for comms. Serial (RS-232/422) for legacy military hardware. CAN bus for vehicles.

⚔️ Military Protocol Interoperability

DEFONEOS doesn't reinvent military C2. It plugs into existing NATO and Five Eyes infrastructure through standard protocols.

Protocol	Standard	DEFONEOS Integration	Status
Cursor on Target (CoT)	Open standard, BSD licence	FreeTAKServer bridge — full CoT message creation, routing, and ingestion	LIVE
TAK Protocol	ATAK/WinTAK/iTAK	Bi-directional TAK client/server. Shares positions, routes, hazards, emergencies	LIVE
STANAG 4817	NATO — Joint Data Link	Parser for NATO standard data link messages. Read-only in v1	PARTIAL
Link 16	NATO — Tactical Data Link	VMF (Variable Message Format) message bridge. MIDS-compatible	PLANNED
VMF (K-Series)	MIL-STD-6017	K-series message generation and parsing for tactical communications	PLANNED
ADS-B	ICAO Annex 10	Live ADS-B ingestion via dump1090/readsb. Aircraft tracking on Cesium globe	LIVE
AIS	ITU-R M.1371	Live maritime AIS ingestion via aisstream.io. Vessel tracking on Cesium globe	LIVE
JSP 936	UK MoD — AI Safety	Compliance assertion generator. Every AI action certified against JSP 936 articles	LIVE
JSP 440	UK MoD — Info Security	Security compliance framework integration. Zero-trust enforcement	LIVE

FreeTAKServer Integration

DEFONEOS ships with a full FreeTAKServer integration — the open-source C2 backbone used by ATAK teams worldwide. This means DEFONEOS can share situational awareness data with any TAK user, on any device, in real time.

┌─────────────────┐ CoT/TAK ┌──────────────────┐ │ DEFONEOS │ ◄──────────────► │ FreeTAKServer │ │ SOV3 Engine │ │ (C2 Backbone) │ │ │ │ │ │ • 30 MCP feeds │ │ • ATAK clients │ │ • BFT Council │ │ • WinTAK nodes │ │ • SIGIL chain │ │ • iTAK mobile │ │ • Cesium globe │ │ • Other TAK │ └────────┬────────┘ └────────┬─────────┘ │ │ │ Position, Hazards, Routes, │ │ Emergency, Chat, Alerts │ │ ← bi-directional sharing → │ └────────────────────────────────────┘

🤖 AI Agent Protocols — The Federation Layer

DEFONEOS is not a single AI. It is a federation of agents, models, and tools that communicate through open protocols. This means any AI framework — Claude, GPT, Gemini, Llama, Kimi — can plug into DEFONEOS.

Protocol	Purpose	Use in DEFONEOS
MCP (Model Context Protocol)	Tool/function calling standard	30 MCP servers expose all sensor data, tools, and intelligence to any AI agent
A2A (Agent-to-Agent)	Cross-platform agent communication	Google A2A spec. SOV3 agent card published. Task delegation between heterogeneous agents
AGNTCY	Agent network orchestration	Multi-agent swarm coordination. Task routing across agent fleet
ANP (Agent Network Protocol)	Agent discovery + session	Agent registration, capability advertisement, session negotiation
DID (W3C Decentralised ID)	Sovereign identity	Every agent has a W3C DID. Ed25519 keypair. No central identity provider
JWT	Auth tokens	Ed25519-signed JWTs for API auth. Scoped permissions per token
OIDC (OpenID Connect)	SSO integration	SSO with existing MoD/corporate identity systems
x402	Payment routing	Micropayment infrastructure for metered API usage (Pro/Governance tiers)
IBC	Inter-blockchain comm	SIGIL chain anchoring to public chains for external verification

SOV3 Agent Card (A2A)

SOV3 publishes a JSON-LD Agent Card per the Google A2A specification. Any A2A-compatible agent can discover SOV3, read its capabilities, and delegate tasks:

{ "@context": "https://www.w3.org/ns/did/v1", "id": "did:csoai:sov3-cognition-engine", "name": "SOV³ Cognition Engine", "description": "Sovereign defence AI: 222 tools, BFT governance, SIGIL audit", "type": ["AI_AGENT", "DEFENCE_SYSTEM"], "capabilities": { "tools": 222, "categories": ["governance", "compliance", "cognition", "security", "memory", "creativity", "federation", "coordination"], "protocols": ["MCP", "A2A", "CoT", "gRPC", "WebSocket"], "governance": "BFT-33-node-council", "audit": "Ed25519-SIGIL-hashchain" }, "serviceEndpoint": "https://sov3.csoai.org/a2a", "authentication": { "type": "Ed25519", "publicKey": "did:csoai:sov3-cognition-engine#key-1" }, "skills": [ "eu-ai-act-compliance", "article-50-watermarking", "jsp936-compliance", "isr-pipeline", "bft-council-vote" ] }

📊 System Compatibility Matrix

DEFONEOS is designed to integrate with, not replace, existing defence systems. Here's what plugs in today:

System / Platform	Protocol Bridge	Status	Direction
ATAK / WinTAK / iTAK	CoT via FreeTAKServer	LIVE	Bi-directional
Cesium / CesiumJS	Native 3D globe integration	LIVE	DEFONEOS → Globe
AIS Receivers	aisstream.io / dAISy / RTL-SDR	LIVE	Inbound
ADS-B Receivers	dump1090 / readsb / RTL-SDR	LIVE	Inbound
PX4 / ArduPilot	MAVLink via MAVSDK	LIVE	Bi-directional
Mava Swarm RL	Python API integration	LIVE	DEFONEOS → Swarms
YOLOv8 / Object Detection	OpenCV + ONNX runtime	LIVE	Inbound (RTSP → detections)
OpenAthena / Geo-rectification	REST API	LIVE	Inbound (pixels → coordinates)
Batear Acoustic C-UAS	Serial / USB	LIVE	Inbound (audio → drone detection)
MQTT IoT Networks	MQTT 5.0	LIVE	Bi-directional
NATO Link 16	VMF message bridge	PLANNED	Bi-directional
Palantir Foundry	REST API export	EXPORT ONLY	DEFONEOS → Foundry
IBM i2 Analyst's Notebook	CSV/JSON export	LIVE	DEFONEOS → i2
MQ-9 / Reaper MTS-B	STANAG 4609 (motion video)	PLANNED	Inbound
Redis / Kafka	Native stream connectors	LIVE	Bi-directional
PostgreSQL / PostGIS	Native	LIVE	Bi-directional
Elasticsearch	Native connector	LIVE	Bi-directional

💻 Integration Code Examples

Python — Subscribe to DEFONEOS CoT Feed

from defoneos import DEFONEOSClient # Connect to DEFONEOS SOV3 engine client = DEFONEOSClient( endpoint="localhost:3101/mcp", auth_method="ed25519", key_path="~/.defoneos/keys/agent_ed25519.pem" ) # Subscribe to CoT events (battlefield positions) client.subscribe_cot( event_types=["a-friend", "a-hostile", "a-neutral", "b-mine"], callback=my_handler, bbox=(-1.0, 53.0, 0.0, 54.0) # Yorkshire bounding box ) # Query the ISR pipeline for current threat assessment threat = client.oowm_think( "Assess threat level in sector SK-3847", use_left_brain=True, use_right_brain=True, use_mamba=True, sigil_signed=True # mandatory for audit ) print(f"Threat level: {threat.assessment}") print(f"Confidence: {threat.confidence}") print(f"SIGIL: {threat.sigil.digest}") print(f"BFT votes: {threat.bft.tally}")

JavaScript — Cesium Globe Integration

// Add DEFONEOS live data layers to any CesiumJS globe const defoneos = new DEFONEOS.GlobeBridge({ cesiumViewer: viewer, wsEndpoint: "wss://defoneos.csoai.org/ws", layers: [ "ais-vessels", // Maritime AIS positions "adsb-aircraft", // Air traffic "cot-positions", // TAK friendly/hostile positions "sentinel-imagery", // Satellite imagery changes "gdelt-events", // OSINT events "earthquake-seismic"// Seismic activity ] }); // Listen for intuition alerts defoneos.onIntuition((alert) => { console.log(`⚠️ INTUITION ALERT: ${alert.summary}`); console.log(` Confidence: ${alert.confidence}`); console.log(` Sector: ${alert.grid_ref}`); console.log(` SIGIL: ${alert.sigil_digest}`); // Show on globe viewer.entities.add({ position: Cesium.Cartesian3.fromDegrees( alert.lon, alert.lat ), point: { pixelSize: 15, color: Cesium.Color.RED } }); });

MCP Tool Call — Query Any Agent Framework

// Works with Claude, GPT, Gemini, Llama, Kimi — any MCP client { "tool": "federated_rag", "arguments": { "query": "Show all maritime anomalies in the English Channel in the last 24 hours, correlated with satellite imagery changes", "vault_top_k": 5, "federation_top_k": 3, "call_tools": true } } // Response includes: // - Vault matches (local intelligence files) // - Federation tool results (live AIS, satellite, OSINT) // - Synthesised answer with provenance // - SIGIL receipt for audit

FreeTAKServer — Share CoT Position

# DEFONEOS → FreeTAKServer → ATAK clients from defoneos.tak import CoTEvent event = CoTEvent( uid="DEFONEOS.SENSOR.001", type="a-friend", # friendly position lat=53.4808, # Leeds lon=-1.2426, hae=100, # altitude metres ce=5, # circular error (metres) le=5, # linear error callsign="DEFONEOS-PERIMETER-01", team="Cyan", remarks="Automated sensor — perimeter secure" ) # Emit to FreeTAKServer (reaches all ATAK/iTAK/WinTAK clients) client.emit_cot(event)