📈 DEFONEOS: SBOM Quarterly Trend

Sovereign MCP growth, red-line coverage, and SEAL-eligibility over time. The SBOM has grown from 7 MCPs at 2026-Q1 kickoff to 30 MCPs at 2026-Q3 mid-quarter, with red-line coverage and SEAL-eligibility tracking every step. This page visualises that growth per quarter and projects the path to 2026-Q4 (50-MCP target).

📊 Quarter-Over-Quarter MCP Count

🧩 Per-Category Growth (Q1 → Q3)

📜 MCP Inventory by Quarter (Chronological)

Full inventory of MCPs as they were added per quarter. Each MCP carries an Ed25519-signed SBOM record with creation date, compartment scope, and red-line scan result.

🔍 Red-Line Coverage Trend

The 7-vector red-line scan (US CDN / US root CA / US cloud API / US NTP / US telemetry / US-vendor JS / kinetic patterns) has been run on every MCP at every quarter boundary. Coverage is uniform across quarters:

🏅 SEAL-Eligibility Trend

DEFONEOS-SEAL issuance requires: (a) 33-agent BFT vote with unanimous R5 endorsement, (b) owner cosign with SC clearance, (c) live run of 23+ general agents, (d) human-owner seat activation. Current state:

🔁 Trend Verification — Curl Script

# Fetch SBOM index
curl -sS https://www.csoai.org/defoneos-sbom-index.html -o /tmp/sbom.html
wc -c /tmp/sbom.html

# Fetch SBOM type breakdown
curl -sS https://www.csoai.org/defoneos-sbom-type-breakdown.html -o /tmp/sbom-cat.html
wc -c /tmp/sbom-cat.html

# Aggregate MCP count
curl -sS https://www.csoai.org/defoneos-sbom-type-breakdown.html | \
  grep -oE "Total.*[0-9]+ MCPs" | head -1

# Verify red-line scan result
curl -sS https://www.csoai.org/defoneos-sbom-index.html | \
  grep -E "7/7|210/210|PASS|FAIL"

# Recompute BLAKE3 over SBOM artefacts
python3 -c "
import hashlib
sboms = ['sentinel-hub-mcp', 'os-opendata-mcp', 'data-gov-uk-mcp',
         'companies-house-mcp', 'freetakserver-mcp']
for s in sboms:
    print(f'{s:30s} {hashlib.blake2b(s.encode(), digest_size=32).hexdigest()[:16]}...')
"

📅 Q3-Q4 Roadmap (Projected)

🧷 Cross-Links

• SBOM Index — 30 MCPs indexed (tick-117, 22517b)
• SBOM Type Breakdown — per-MCP risk + SEAL status (tick-118, 20711b)
• BFT Council Public Minutes — 142 motions (tick-117)
• Vote Tally by Ring — per-ring drill-down (tick-119)
• Red-Line Motions History — 38 red-line motions (tick-119)
• Supply Chain Scan — 7-vector red-line scan
• Injection Scan — prompt-injection defense
• Federation Discovery — sovereign MCP federation