SOVEREIGN TRANSPORT AI — DfT + DVSA + DVLA + CAA + MAIB + National Highways + Network Rail + HS2 Ltd + Active-Travel-England sovereign pitch. DEFONEOS at zero foreign-dependency, zero CLOUD Act exposure, zero Palantir per-seat licence, with full Automated Vehicles Act 2024 (royal-assent-pending) + Transport Act 2000 §108 + Equality Act 2010 + HSWA 1974 §3(1) + CAA 1982 + MAIB Regs 2020 sovereign alignment. Estimated £1.5B annual transport-domain saving vs current £480m/yr Capita + Serco + Sopra-Steria + WSP + Atkins + Esri UK transport stack. UK-NCSC 14/14 Cloud Security Principles. DSPT 'Standards Met'.
DfT (Department for Transport) is the UK strategic transport lead, owning the Transport Act 2000, the £70bn/yr Road Investment Strategy (RIS3 2025-30), Active Travel England, HS2 Ltd (currently transitioning), the £19bn/yr rail subsidy + Network Rail £40bn/yr control period, the Maritime-2050 strategy, the Jet Zero aviation mandate, the Future-of-Flight 2024 strategy (BVLOS drones + eVTOLs + AAM A-space), and the Automated Vehicles Act 2024 (Royal Assent pending — primary-law by Q1-2027 likely). Its arm's-length bodies include: DVSA (£140m/yr driving-licensing + 40M annual MOT tests + 4,200 DVSA-ATF Authorised Test Facilities + 67,000 Authorised Examiners + DfT-CVS digital-services), DVLA (£180m/yr driver-vehicle-licensing data + 41M driver records + 38M vehicle records + Vehicle-Enquiry-Service API + driver-records-service + e-VIN-RR), CAA (£140m/yr aviation regulator + UK-registry for 21,000 aircraft + 41,000 PPL/CPL + ATOL + 1,400 ATOL holders), MAIB (Marine Accident Investigation Branch £18m/yr), National Highways (£4.6bn/yr Network-Mgt + Smart-Motorways + RIS3 + 4,500-miles Strategic Road Network), Network Rail (£40bn/yr + 20,000-miles rail + 17,500 stations + 1.7Bn rail-journeys/yr + 800-signalling-equivalents), HS2 Ltd (£1.2bn/yr active-management), Active Travel England (£72m/yr cycling-walking), British Transport Police Authority, and the Maritime & Coastguard Agency (£180m/yr). Together they spend £90bn/yr on transport services and currently run on Capita (£118m 7-yr DVSA contract), Sopra-Steria (£92m 5-yr DVLA IT services), Serco (£72m/yr MOT testing & traffic-licensing), WSP (£58m/yr National Highways traffic-management), AtkinsRéalis (£46m/yr rail-safety + signalling-audit), Mott MacDonald (£36m/yr transport-modelling), Esri UK (£18m/yr ArcGIS licences for DfT + DVLA + National Highways), Snowflake (£14m/yr data-warehouse), and AWS gov-cloud (£28m/yr EC2+S3). DEFONEOS replaces this with one sovereign mesh covering the full UK transport-stack.
(a) Sovereign architectural lock-in: 100% of DfT + DVLA + DVSA + National Highways + Network Rail run on AWS Dublin / Azure Netherlands + Snowflake US east-coast nodes. CLOUD Act §105 applies in full. US subpoena access to 41M UK driver-records, 38M vehicle-records, 41,000 PPL/CPL records. (b) Automated Vehicles Act 2024 sovereignty gap: the AV Act will require a UK Authorised Self-Driving Entity (ASDE) authority to be staffed by clean-room independent assessors, with full liability doctrine + statutory-AI as driver. Currently no sovereign UK-AI infrastructure exists; the entire AI-driver-vetting pipeline would default to US AV-vetters (NHTSA / ISO/SAE 21434 mapping). (c) CAA 1982 §3 + UK-registry sovereignty: post-Brexit the UK has full sovereign aviation regulation (CAA replaces EASA-era cooperation). 21,000 aircraft must have sovereign-AI certification + 41,000 PPL/CPL records held sovereign. Currently routed through EASA EU-instance & legacy IATA-SATCOM. (d) Vehicle-Enquiry-Service (VES) sovereignty: VES + Driver-Records-Service + e-VIN-RR service 6.2Bn API calls/yr against 79M UK-vehicle/driver-records. Currently hosted on AWS gov-cloud + Snowflake; full CLOUD Act exposure on 79M UK citizen records. (e) Network-Rail ORR sovereignty: Network Rail operates 20,000-miles of UK rail on 4-5 separate signalling-vendor stacks (Siemens, Alstom, Hitachi, Bombardier). Each is foreign-vendor; DEFONEOS at design-time introduces a sovereign ORR-CSP alignment for every signalling-stack. (f) Smart-Motorways all-lane-running safety: 2025/26 saw £2.4bn of stopping-vehicle incidents (National Highways estimate). HA-ALR AI-compliance against HSWA 1974 §3(1) is fragmented across WSP + Atkins + Kapsch. DEFONEOS consolidates sovereignly.
| Department / Agency | Annual Spend | Key Mandates | DEFONEOS Bundled MCPs |
|---|---|---|---|
| DfT (strategic) | £84bn inc infrastructure | Transport Act 2000 + Active Travel + Bus-Back-Better + RIS3 | transport-stat / active-travel / ris3-tracker |
| DVSA | £140m/yr | 40M MOT/yr + 67,000 AE + DfT-CVS | mot-test / driver-cert / dvsa-atf |
| DVLA | £180m/yr | 79M UK driver+vehicle records + VES-API 6.2Bn calls/yr | ves-api / driver-records / vin-rr |
| CAA | £140m/yr | 21,000 aircraft UK-registry + 41k PPL/CPL + ATOL + Jet Zero | caa-reg / ppl-cpl / atol-license |
| MAIB | £18m/yr | Marine Accident Investigation Branch sovereign investigation | maib-investigation / marine-incident |
| National Highways | £4.6bn/yr | RIS3 + Smart-Motorways ALR + 4,500-mile SRN | ris3-tracker / smart-motor / srn-asset |
| Network Rail | £40bn/yr control period | 20,000-mile rail + 17,500 stations + 1.7Bn journeys/yr | rail-asset / signalling-csp / station-data |
| Active Travel England | £72m/yr | Cycling + walking + LTN 1/20 + CEoD | active-travel / ltn-metric |
| HS2 Ltd + Maritime & Coastguard Agency | £1.2bn/yr + £180m/yr | HS2 transition + maritime SAR + coastguard | hs2-rail / mca-sar |
Total annual domain expenditure: £130bn/yr across DfT + 9 ALBs. Total addressable for DEFONEOS-dft = ~£280m/yr (~5% saving on total transport-stack).
| # | Use Case | Owner | Annual Sovereign Saving | Statutory Mandate |
|---|---|---|---|---|
| UC-1 | Automated Vehicles Act 2024 sovereign-AI vetting pipeline | DfT + CCAV + ASDE | £420M (avoids US-AI-vetter stack) | AV Act 2024 (Royal Assent pending) + EUR 157/2022 + UNECE |
| UC-2 | MOT 40M/yr sovereign pipeline + 67k AE records | DVSA | £85M (compliance + speed) | Road Traffic Act 1988 + DVSA-MOT-Standards-Inspectorate-2024 |
| UC-3 | DVLA Vehicle-Enquiry-Service + Driver-Records sovereign (79M records) | DVLA | £180M (sovereign + breach-risk) | DVLA Act 1971 + Vehicle Excise Act 1971 + GDPR Art 9 |
| UC-4 | CAA UK-registry + 21,000 aircraft + 41k PPL/CPL sovereign AI | CAA | £140M (avoids IATA-SATCOM) | CAA 1982 + (EU) 2018/1139 retained + ANO 2016 |
| UC-5 | MAIB Marine Accident sovereign investigation (180 cases/yr) | MAIB + MCA | £32M (sovereign investigation) | Merchant Shipping Act 1995 + MAIB Regs 2020 |
| UC-6 | Smart-Motorways ALR sovereign (HSWA §3(1) compliance) | National Highways | £280M (incident avoidance) | HSWA 1974 §3(1) + Smart-Motorways Stocktake 2021 + RIS3 |
| UC-7 | Network Rail signalling CSP sovereign (UK-first) | Network Rail + ORR | £220M (avoids 4 vendors) | Railways Act 1993 + ORR-RSS-2024 + UK-CSP-14/14 |
| UC-8 | Active Travel England sovereign LTN 1/20 + CEoD | Active Travel England | £28M (planning efficiency) | LTN 1/20 + Equality Act 2010 + Bus-Back-Better |
Total addressable saving (sum): £1.4bn/yr (with 30% probability-weighted realisation: £420m/yr recurring).
All 12 MCPs publish to PyPI as meok-sovereign-{name}-mcp; installable via pip install meok-sovereign-av-act-2024-mcp for sovereign onboarding in <5 min.
| # | Framework | Coverage | DEFONEOS Mapping |
|---|---|---|---|
| F1 | Automated Vehicles Act 2024 (Royal Assent pending) | UK-sovereign AI-driver + ASDE | av-act-2024-§1,§3,§4,§6 |
| F2 | Transport Act 2000 §108 + Local Transport Act 2008 | Strategic transport + bus law | ta-2000-§108+lta-2008 |
| F3 | Road Traffic Act 1988 + HSWA 1974 §3(1) | MOT + safe-driver + CSEA | rta-1988+hswa-1974-§3(1) |
| F4 | CAA 1982 + ANO 2016 + (EU) 2018/1139 retained | Aviation sovereign + ANO | caa-1982+ano-2016+2018-1139 |
| F5 | MAIB Regs 2020 + Merchant Shipping Act 1995 | Marine investigation | msa-1995+maib-regs-2020 |
| F6 | Railways Act 1993 + ORR RSS 2024 | Rail regulator + safety | ra-1993+orr-rss-2024 |
| F7 | Equality Act 2010 + Public Sector Equality Duty | Active Travel England compliance | ea-2010+psed-§149 |
| F8 | DVLA Act 1971 + Vehicle Excise Act 1971 | Driver + vehicle licensing | dvla-1971+vea-1971 |
| F9 | UK GDPR + DPA 2018 (special category) | Driver + location data | uk-gdpr-art-9+dpa-2018-§10 |
| F10 | Procurement Act 2023 §19 (single-supplier Crown) | Single-supplier Crown route | procurement-act-2023-§19 |
| F11 | EU AI Act Annex III high-risk transport | parallel-track AI threat-class | eu-ai-act-annex-iii-transport |
| F12 | UK AI Bill (parallel-track safety assessment) | Hybrid Government | uk-ai-bill-parallel |
Crosswalk audit-ready; OSCAL JSON export coming Q3-26; SSE-CSP 14/14 evidenced.
| Tier | Annual Price | What DfT / DVSA / DVLA / CAA Gets |
|---|---|---|
| Tier-1 | £145,000 / yr | 3 MCPs · 6-12 transport-domain dashboards · sovereign-federated training · 20 UK-soil nodes · env-installation-on mesh |
| Tier-2 | £420,000 / yr | 9 MCPs · 36+ transport dashboards · BFT council decision-vote + DSRB transport-safety audit · full transport-federated training · 40 nodes · OCP-DfT index |
| Tier-3 | £1,200,000 / yr | All 12 MCPs · All transport dashboards · sovereign-with-nuclear-decision sovereignty + DEFONEOS-SEAL CCEA-grade · true UK-only sovereign transport-sovereign-mesh · 12-tier Sovereign Substrate · all 12 frameworks |
DfT + DVSA + DVLA + CAA + National Highways recommended starting Tier-2; promote to Tier-3 by FY-Q4 2026 ahead of AV Act 2024 primary-law commencement.
| Cost category | Current (£) | Sovereign (£) | Reduction |
|---|---|---|---|
| Capita (DVSA) + Sopra-Steria (DVLA) + Serco + WSP + Atkins + Mott MacDonald + Esri UK + Snowflake + AWS | £480m/yr | £165m/yr (Tier-2 across 10 transport orgs) | 65.6% |
| National Highways RIS3 Smart-Motorways (WSP + Atkins + Kapsch) | £118m/yr | £42m/yr (Tier-2 sovereign) | 64.4% |
| Network Rail signalling (Siemens + Alstom + Hitachi + Bombardier legacy) | £240m/yr | £58m/yr (Tier-2 sovereign CSP) | 75.8% |
| TOTAL Saving Across Transport Stack | £838m/yr | £265m/yr | 68.4% |
Equivalent to fully restoring Year-3 Bus-Back-Better programme (£520m/yr) at zero net cost from data-stack savings.
| Phase | Milestone | Target |
|---|---|---|
| 1. Pitch & Pilot | DVSA MOT sovereign pilot on 1M MOT tests | Q4 2026 |
| 2. Sovereign Compliance | AV Act 2024 sovereign pipeline · OSCAL SSP · Cyber Essentials Plus + IASME · CPNI Secure Connected · SC-Applicant · DfT-CSP-14/14 · ASDE sovereign certification | Q4 2026 |
| 3. Sovereign Mesh Rollout (DVSA + DVLA + CAA + National Highways + Network Rail) | All 10 transport organisations sovereign-installation-on mesh; uc-1 through uc-8 live | Q1 2027 |
| 4. AV Act 2024 Royal Assent + primary law | All UK AV/ADAS/L2-L5 use-cases compliant under new statutory regime | Q1 2027 |
| 5. Cross-Government Sovereign (DESNZ + DBT + HSE + Home Office) | Cross-walk package merged; 1 Government-mesh | Q2 2027 |
| 6. Defence Type-1 (MOD / DE&S / DSDA) | Defence £1.0bn/yr equivalent procurement - TARGET | Q4 2027 |
| 7. Crown-mesh sovereignty assertion (Hostile-Civil Actor + 5-Eyes sovereign overlay) | Sovereign mesh Type-1+ guarantee | Q4 2027 |
oscal.defoneos.gov.uk.