CSOAI is the sovereign AI assurance substrate — a Charter-anchored, RFC 8032 §7.1-verifiable system that audits any AI model against EU AI Act, GDPR, ISO 42001, NIST AI RMF, SOC 2, DORA, NIS2, and the UK AI Bill in one API call. Each call emits a signed receipt that a regulator can verify in seconds, not the days Big 4 takes.
We're not building AI. We're building the trust layer underneath it — 12 sovereign mind-sets × 8 buyer personas × 4 jurisdictions, all backed by a constitutional charter that survived 230 years of NHS-style institutional values (1795 Speenhamland → 2026 OOWM).
The EU AI Act Aug 2 2026 deadline just turned every CTO in Europe into a buyer. The Big 4 charge £50K for what we deliver in 30 seconds at £999.
Sovereign Layer Zero Charter v1.0 · SHA-256 df65a6585cf6a686…22054 · seeded 7 July 2026. CC0 1.0 — anyone can read, fork, verify. The charter is the constitutional anchor: every sigil minted by the substrate references the charter hash. No competitor can ship a competing substrate without reproducing 230 years of NHS lineage + 4 immutable hard-stops + 13 protocols + 5 alchemical layers.
12 trained specialists — forensic, risk_classifier, human_oversight, bias, cybersecurity, gdpr, iso_42001, nist_rmf, soc2, dora, uk_ai_bill, nis2 + meta. Each emits a unique Ed25519 sigil digest. Each ran live in the SOVEREIGN_LAYER_ZERO_LANDING demo on 7 July. The substrate learns from every action (OOWM 4-stage cycle: INGEST → LEARN → ALIGN → REVISE).
33-agent BFT council (HotStuff 4-phase, quorum 23/33) + Care Floor (values) + SIGIL (chain integrity). Every sovereign action votes through all 3 councils. Every DEFONEOS-SEAL credential requires a 33-agent BFT vote. Care Floor 0.95 enforced — no kinetic targeting, no personal surveillance.
L0 Sovereign Sigil · L1 Identity (DID, sovereign wallet) · L2 Execution (MCP, A2A, x402, Open Hands) · L3 Compliance (Charter universe, OSCAL) · L4 Knowledge (49 GB data moat, 530 Crown Jewels) · L5 Evolution (BFT + OOWM cycle + fork doctrine). Remove any layer, substrate is no longer sovereign.
MCP · A2A · DID · JWT · x402 · Ed25519 · SIGIL · OSCAL · DORADO · RPC discover · Open Hands · HTTP/HTTPS · Bitcoin OTS anchor — every external integration, every receipt format, every payment rail. The substrate speaks every protocol a regulator / verifier / customer uses.
| Driver | What it is | When | What it means for us |
|---|---|---|---|
| EU AI Act | High-risk obligations enforceable | 2 Aug 2026 | 22 days — every EU CTO needs assurance |
| UK AI Bill [HL] | 5 regulator principles | 2026-27 | UK CNI primes + regulators |
| NIS2 | Incident reporting obligations | Oct 2024 (UK aligned) | Essential entities EU-wide |
| DORA | Operational resilience in finance | Jan 2025 | EU financial services buy now |
| ISO 42001 | AI Management System standard | Dec 2023 | Global enterprise cert path |
| NIST AI RMF 1.0 | US national AI risk framework | Jan 2023 | US federal contractor path |
| CPS 230 (AU) | Operational risk management | Jul 2025 | AU banks + APRA entities |
| Tier | Price | What they get | Y1 target |
|---|---|---|---|
| Open | £0 | Free self-assessment, 3 calls/day, Charter-signed | 10,000 signups (bottom of funnel) |
| Pro | £199/mo | Unlimited calls, 100 sigils/day, 7 frameworks | 500 subs = £99,500/mo = £1.19M ARR |
| Gov | £2,499/mo | All 12 mind-sets, multi-jurisdiction, audit pack | 50 subs = £125K/mo = £1.5M ARR |
| Enterprise | £4,950/mo | Dedicated General + Slack channel + System Card | 20 subs = £99K/mo = £1.19M ARR |
| Crown (RFQ) | £15K+/mo | UK defence primes + DEFONEOS-SEAL path | 5 subs = £75K/mo = £900K ARR |
| One-off | £999 | Gap analysis · 12-mind-set report | 200 sales = £199,800 one-off |
| Asset | Status | Proof |
|---|---|---|
| Sovereign API | ✅ LIVE | 12 mind-sets · 30 tools · qwen2.5:3b loaded |
| Production URLs | ✅ 11/11 HTTP 200 | 8 static + 3 sovereign-deploy endpoints |
| Sigil chain | ✅ 74 receipts | RFC 8032 §7.1 · Ed25519 · on disk |
| Charter | ✅ v1.0 minted | SHA-256 df65a6585cf6a686…22054 |
| Outreach | ✅ 140 KB / 1,876 lines | 50 emails · 50 targets · 9 tweets · 5 LinkedIn · 10 Reddit · 1 HN · 50 VCs |
| Personas | ✅ 13 pages live | 8 personas + 4 jurisdictions + picker |
| Crown Jewels | ✅ 12 wrapped · 23 staged | agentops, crewAI, dify, langgraph, … |
| Sibling (M4) | ✅ DEFONEOS tick 54 | 197+ pages · 30/30 MCPs · 19/19 Crown pack |
| M2 alignment | ✅ 5 M2 plans referenced | delboy · ecosystem · master · workspace-rules · checklist |
| EAT automation | ✅ live | jeeves-all-day-batch.sh · daily ticks · golden 29/29 |
SOV3³ Sovereign Omniscient Vessel³ ├─ L0 Sovereign Sigil · Ed25519 · RFC 8032 §7.1 · 74 receipts ├─ L1 Identity · DID · sovereign wallet · OrgKernel ├─ L2 Execution · MCP · A2A · x402 · Open Hands · 127 tools ├─ L3 Compliance · Charter universe · OSCAL · 4 jurisdictions ├─ L4 Knowledge · 49 GB data moat · 530 Crown Jewels └─ L5 Evolution · OOWM 4-stage · 33-agent BFT · fork doctrine 12 Generals (mind-sets): 1 forensic → 410ce4693b40f44a 2 risk_classifier → 9e88f6443066395d 3 human_oversight → 12c5eff5cc8ce2fb 4 bias_fairness → 99a52065903b2136 5 cybersecurity → 9d196ed326fb0ee8 6 gdpr → b31d5cf19c963a03 7 iso_42001 → 4ea04ae5abafb2cf 8 nist_rmf → b9dcabc584e534de 9 soc2 → 1688fa9b51a95aed 10 dora → 63ba98d8df6b4bb8 11 uk_ai_bill → 5c74096ee7ee6be8 12 nis2 → 2313069bca434b40 meta → d68502cd009c2509
| Round | Size | Pre-money | Use of funds |
|---|---|---|---|
| Seed (DONE) | £50K | n/a | Boot substrate · M4 Mac · Charter v1.0 |
| Pre-A (now) | £500K | £5M | Stripe live + first £999 + 1K free + 4-hire |
| Series A (Q1 2027) | £45-90M | £180-240M | Scale to 100 hires · UK + US + EU · Sovereign cloud · Crown Jewels |
| Series B (2028) | £150-300M | £600M-£1.2B | Global sovereign mesh · 33 sovereign nodes · CNI primes · DEFONEOS-SEAL |
git push -u origin main · 30soutreach/cold-emails-50.md · 10 minTotal: 16 minutes. The rest is autonomous.
NO kinetic-targeting patterns · NO personal-surveillance patterns · NO "AUKUS partnership" / "DAIC certified" claim without signed letter · NO DEFONEOS-SEAL without 33-agent BFT vote (quorum 23/33) · NO DSEI booth without UK-prime pilot letter · NO acquisition of defonos.io domain · NO mixing of meok-defoneos / csoai-defoneos / dagon assets.
| Asset | URL |
|---|---|
| Sovereign Tab (pin this) | /sov3-tab |
| JEEVES briefing | /SOV3_OOWM_BRIEFING |
| M4 sibling tab | /SOV3_OOWM_KNOWLEDGE_TAB |
| Multi-Mind Matrix | /multi-mind-matrix |
| D6 Distribution | /d6-distribution |
| D7 Measure | /measure |
| Sigil Audit | /audit |
| Series A Pitch (this page) | /series-a |
| DEFONEOS hub (M4) | csoai-static-deploy2.vercel.app |
| Sovereign API | /api/charter |