12 UK telecoms entry points · 8 connectivity priorities · 6 DEFONEOS MCPs · Ofcom / Openreach / National Mobile Network backbone
UK telecoms is designated Critical National Infrastructure (CNI) under the 2017 Digital Economy Act, with Ofcom regulating 700+ communications providers, the 2024 Telecommunications Security Act mandating HCSE (High Risk Vendor) exclusion from the 5G core, and Project Gigabit extending full-fibre to 99% of premises by 2030. The 2025 NCSC Telecoms Security Requirements (TSR) impose multi-factor attestation, SBOM provenance, and supply-chain audit obligations on all operators. DEFONEOS delivers the UK's first open-source Sovereign Public Services OS purpose-built for telecoms — BFT-governed network resilience evidence chains, HCSE supply-chain SBOM verification, AI-assisted spectrum monitoring, and sovereign data-plane provenance for 5G/6G Open RAN deployments.
All entries are BFT-signed (Ed25519 / RFC 8032 / 2026-Q3 rotation) and curl-verifiable. Per-entry contacts sourced from Ofcom + DSIT + Openreach + NCSC TSR + Building Digital UK (2026-Q1).
| # | Entry point | Location | Function | DEFONEOS fit |
|---|---|---|---|---|
| T1 | Ofcom — Digital Communications | London | Telecoms regulation · TSR enforcement · spectrum | DEFONEOS MCPs: mcp-dynamic-sbom · bft-council-probe — TSR SBOM compliance + BFT attestation |
| T2 | DSIT — Telecoms Infrastructure | London | Project Gigabit · Shared Rural Network · 5G strategy | DEFONEOS MCPs: sentinel-hub-mcp · mqtt-bridge — rural coverage mapping + IoT telemetry |
| T3 | Openreach (BT Group) | London | Full-fibre rollout · passive infrastructure | DEFONEOS MCPs: mqtt-bridge · bft-council-probe — fibre monitoring + resilience evidence |
| T4 | National Mobile Network — SRN Consortium | London | Shared Rural Network · 4G geographic coverage | DEFONEOS MCPs: sentinel-hub-mcp · mqtt-bridge — coverage verification + signal telemetry |
| T5 | Building Digital UK (BDUK) | London | Project Gigalt · rural broadband delivery | DEFONEOS MCPs: data-gov-uk-mcp · bft-council-probe — delivery data + governance |
| T6 | NCSC — Telecoms Security | London | TSR · HCSE vendor exclusion · 5G core security | DEFONEOS MCPs: mcp-dynamic-sbom · bft-council-probe — HCSE SBOM enforcement + BFT |
| T7 | Vodafone UK | Newbury | 5G rollout · Open RAN · enterprise connectivity | DEFONEOS MCPs: mqtt-bridge · mcp-dynamic-sbom — RAN telemetry + supply chain |
| T8 | EE (BT Group Mobile) | London | 5G · ESN mobile · Emergency Services Network | DEFONEOS MCPs: mqtt-bridge · bft-council-probe — ESN telemetry + governance |
| T9 | Three UK | Reading | 5G · mobile broadband · data sovereignty | DEFONEOS MCPs: mcp-cspm · bft-council-probe — cloud posture + governance |
| T10 | O2 (Virgin Media O2) | Slough | 5G · converged fixed-mobile · enterprise | DEFONEOS MCPs: mcp-cspm · mqtt-bridge — converged monitoring + telemetry |
| T11 | UK SPF — Spectrum Policy Forum | London | Spectrum allocation · 6GHz Wi-Fi · mmWave 5G | DEFONEOS MCPs: bft-council-probe · sentinel-hub-mcp — spectrum governance + EO |
| T12 | Telecoms Capabilities Delivery Unit (TCDU) | London | Lawful intercept · data retention · CALEA-equivalent | DEFONEOS MCPs: bft-council-probe · sovereign-keystore — BFT-governed intercept audit |
| # | Priority | Owning body | DEFONEOS MCP coverage | Alignment cross-walk |
|---|---|---|---|---|
| P1 | Telecoms Security Requirements (TSR) | Ofcom / NCSC | mcp-dynamic-sbom · bft-council-probe | TSR Code · SBOM attestation · HCSE exclusion |
| P2 | High Risk Vendor (HCSE) exclusion | DSIT / NCSC | mcp-dynamic-sbom · sovereign-keystore | 2024 Telecoms Security Act · Huawei ban · 5G core |
| P3 | Project Gigabit (rural full-fibre) | DSIT / BDUK | sentinel-hub-mcp · data-gov-uk-mcp | £5bn Project Gigabit · 99% premises by 2030 |
| P4 | Shared Rural Network (SRN) | Ofcom /四大 MNOs | mqtt-bridge · sentinel-hub-mcp | 4G geographic coverage · £1bn SRN |
| P5 | 5G / Open RAN deployment | DSIT / vendors | mqtt-bridge · mcp-dynamic-sbom | Open RAN · vendor diversity · RIC telemetry |
| P6 | Spectrum management / 6GHz | Ofcom / UK SPF | sentinel-hub-mcp · bft-council-probe | Spectrum auction · 6GHz Wi-Fi 6E · mmWave |
| P7 | AI-assisted network operations | Operators / Ofcom | bft-council-probe · mqtt-bridge | AI NOC · predictive failure · self-healing |
| P8 | Data sovereignty / lawful intercept | TCDU / Home Office | bft-council-probe · sovereign-keystore | Investigatory Powers Act · BFT-governed audit |
| # | MCP server | Category | Description |
|---|---|---|---|
| 1 | mcp-dynamic-sbom | Supply Chain SBOM | HCSE vendor exclusion verification · telecoms equipment SBOM attestation · TSR compliance |
| 2 | bft-council-probe | BFT Governance | 33-agent BFT evidence chain for telecoms resilience / spectrum / intercept decisions |
| 3 | mqtt-bridge | IoT / Network Telemetry | RAN telemetry · fibre monitoring · ESN signal bridge · self-healing network evidence |
| 4 | sentinel-hub-mcp | Satellite EO | Rural coverage verification · mast location mapping · infrastructure geospatial monitoring |
| 5 | mcp-cspm | Cloud Posture | 5G core cloud security posture · Open RAN RIC posture · multi-cloud telecoms |
| 6 | sovereign-keystore | Key Management | Ed25519 key rotation for SIM / eSIM / RAN device authentication · lawful intercept audit keys |
The UK telecoms digital backbone spans Ofcom regulation, the 2024 Telecommunications Security Act (TSR), Project Gigabit (£5bn rural full-fibre), the Shared Rural Network (£1bn 4G geographic coverage), Open RAN vendor diversification, and the Emergency Services Network (ESN). DEFONEOS integrates via BFT-governed network resilience evidence chains, HCSE supply-chain SBOM verification, AI-assisted spectrum monitoring, and sovereign data-plane provenance for 5G/6G deployments. All evidence is curl-verifiable at the protocol layer.
| Step | Action | Owner | Time | Evidence |
|---|---|---|---|---|
| 1 | Buyer identifies telecoms AI / TSR compliance requirement | Buyer | — | Requirement document |
| 2 | CSOAI sends DEFONEOS telecoms pack + 30-day pilot pricing (T1 £2,840 / T2 £9,150 / T3 £28,400) | CSOAI | 1 hour | This page (curl-verifiable) |
| 3 | Buyer reviews BFT governance evidence + SBOM + TSR alignment pack | Buyer | 2-4 hours | curl -s /health + SBOM pack |
| 4 | Submit procurement request (G-Cloud 14 / DSP bid / direct framework) | Buyer | 1-2 hours | DSP tracker |
| 5 | CSOAI provisions telecoms-sector sovereign VM + DEFONEOS substrate | CSOAI | <24 hours | AG-1: curl -s /health HTTP 200 |
⚠️ HARD RED-LINE: DEFONEOS handles OFFICIAL and OFFICIAL-SENSITIVE data ONLY. No classified data. No mass surveillance of telecoms subscribers. No individual lawful intercept without Home Office warrant + BFT council quorum (23/33). No personal-surveillance patterns. Telecoms AI supports network resilience, spectrum monitoring, SBOM provenance, and audit-grade compliance evidence — never mass subscriber tracking or warrantless intercept.
| Buyer type | Entry point | Procurement vehicle | Security requirement | Pilot tier |
|---|---|---|---|---|
| Ofcom / Regulator | T1 | Direct framework / DSP | OFFICIAL-SENSITIVE | T2/T3 |
| DSIT / Government | T2 | G-Cloud 14 / DSP | OFFICIAL | T2 |
| Openreach / Operator | T3 | Direct commercial | OFFICIAL | T1/T2 |
| NCSC / Security | T6 | DSP / direct | OFFICIAL-SENSITIVE / SC | T3 |
| MNO (Vodafone/EE/Three/O2) | T7-T10 | Direct commercial / G-Cloud | OFFICIAL | T2 |
| TCDU / Lawful Intercept | T12 | DSP direct / classified | OFFICIAL-SENSITIVE / SC | T3 |