EU AI Act Article 50 — 20 days to seal | Get passport

🏛️ The DEFONEOS Operating System

Britain's first open-source Sovereign Defence OS. Five layers. Thirty sensor MCPs. One hundred eighty-eight tools. Zero foreign dependencies.

5

Architecture Layers

Sensor → Fusion → Cognition → Command → Compliance

30

MCP Servers

Satellite, maritime, air, land, cyber, civil services

188+

SOV3 Tools

AI tools callable from any agent or integration

0

Foreign Cloud Deps

Sovereign UK infrastructure only. No CLOUD Act exposure.

🏛️ Architecture
📊 Sensor Layer
🧠 Cognition Layer
⚖️ Governance
📦 Install

🏛️ The 5-Layer Sovereign Defence Stack

DEFONEOS is not a monolith. It is a composable, open-source operating system where each layer is independently deployable, independently auditable, and independently swappable. MOD can replace any component without touching the rest.

5

Compliance Layer — JSP 936 / JSP 440 / EU AI Act

Every action generates a SIGIL receipt (Ed25519-signed hash chain). JSP 936 compliance certificates auto-generated. Article 50 AI-content passports issued per interaction. Full audit trail replayable by regulators.

4

Command Layer — FreeTAKServer C2 + BFT Council

Cursor-on-Target (CoT) protocol for NATO interoperability. 33-agent Byzantine Fault Tolerant council gates every consequential action. 22-of-33 quorum required for escalation. No single point of failure.

3

Cognition Layer — SOV3 Organic Open World Model

Mamba-2 SSM (16-dim state) compresses streaming sensor data. 14 neural models for vision, NLP, anomaly detection. Intuition engine detects emerging threats 40s before threshold alerts. Cross-model reasoning via bridge_think.

2

Fusion Layer — CesiumJS 3D Common Operating Picture

350M buildings (OpenStreetMap). Real terrain (OS Terrain). 17+ live data layers (AIS, satellite, air quality, weather, seismic). All fused into a single 3D globe. MOD-grade situational awareness.

1

Sensor Layer — 30 MCP Servers

Sentinel-Hub satellite. AIS maritime tracking. AISstream. OpenAQ air quality. ONS statistics. Companies House. GDELT OSINT. RTSP cameras. MQTT IoT. OS Open Data. All as MCP servers — pluggable, hot-swappable, sovereign.

📊 The 30 MCP Sensor Servers

Every data source in DEFONEOS is an MCP (Model Context Protocol) server. This means any AI agent — SOV3, Claude, GPT, Gemini — can query any sensor through a standard interface. No vendor lock-in. No proprietary APIs.

#MCP ServerDomainData Type
1sentinel-hub-mcpSatelliteSentinel-1/2/3 imagery (Copernicus)
2os-opendata-mcpGeospatialOrdnance Survey terrain + buildings
3data-gov-uk-mcpGovernmentGOV.UK open datasets
4companies-house-mcpCorporate IntelUK company registry
5ons-statistics-mcpDemographicsOffice for National Statistics
6gdelt-news-mcpOSINTGlobal news events (GDELT Project)
7openaq-air-mcpEnvironmentGlobal air quality monitoring
8aisstream-maritime-mcpMaritimeLive AIS vessel tracking
9rtsp-camera-mcpVisualRTSP IP camera feeds
10mqtt-bridge-mcpIoTMQTT sensor bridge (IoT devices)
11defoneos-maritime-mcpDefenceDark vessel detection + EEZ monitoring
12defoneos-airspace-mcpDefenceAirspace awareness + ADS-B tracking
13defoneos-cyber-mcpDefenceCyber threat intelligence + IDS
14defoneos-counterdrone-mcpDefenceC-UAS detection + RF + acoustic
15defoneos-jsp936-mcpComplianceJSP 936 audit trail generation
16defoneos-bft-mcpGovernance33-agent BFT council voting
17defoneos-pqc-mcpSecurityPost-quantum crypto operations
18defoneos-medevac-mcpDefenceMEDEVAC routing optimisation
19defoneos-logistics-mcpDefenceSupply chain + logistics tracking
20defoneos-sigint-mcpDefenceRF spectrum monitoring
21defoneos-humanitarian-mcpCivilDisaster response coordination
22defoneos-border-mcpDefenceBorder surveillance + anomaly detection
23defoneos-ccc-mcpDefenceCommand, Control, Communications
24defoneos-ew-mcpDefenceElectronic warfare spectrum ops
25defoneos-nato-mcpInteropNATO STANAG compatibility layer
26defoneos-aukus-mcpInteropAUKUS Pillar II data exchange
27defoneos-a2a-mcpProtocolAgent-to-Agent (A2A) coordination
28defoneos-civil-mcpCivilCivil service data integration
29defoneos-globe-mcpVisualisationCesiumJS 3D globe + data layers
30defoneos-swarm-mcpAutonomyMava RL swarm coordination

🧠 The SOV3 Cognition Engine

DEFONEOS does not use a single LLM. It uses SOV3 — an Organic Open World Model that combines multiple neural architectures into a single sovereign cognition engine.

ComponentArchitectureRole
Mamba-2 SSMState-Space Model (16-dim)Compresses streaming sensor data. Long-context memory without attention cost.
Left MoEMixture of ExpertsAnalytical reasoning: math, logic, compliance, risk assessment
Right MOMMixture of ModelsPerception: vision, audio, pattern detection, spatial reasoning
Intuition Engine1Hz SIGIL → Mamba stateDetects emerging patterns before threshold alerts. 40s lead time on average.
BIG BRAIM8 category winnersRoutes queries to best model: coding, reasoning, long-context, multilingual, edge, TTS, embedding, router
Quantum LayerQAOA + VQE + GroverCare weight optimisation + memory importance scoring + quantum search

How a Decision Flows

Sensor data → MCP server → Mamba SSM (compress) → Left MoE (analyse) + Right MOM (perceive) → Intuition Engine (pattern match?) → BFT Council (22-of-33 quorum vote) → SIGIL receipt (Ed25519 signed) → JSP 936 certificate (auto-generated) → Cesium globe update (visual) → C2 action (CoT to FreeTAKServer)

⚖️ Byzantine Fault Tolerant Governance

DEFONEOS never executes a consequential action without council approval. 33 independent agents vote on every escalation. The system tolerates up to 11 compromised agents (f=11 in a 3f+1 system) without any incorrect decision being made.

ParameterValueRationale
Council size33 agents3f+1 with f=11 (tolerates 33% Byzantine)
Quorum22-of-33Supermajority (2/3) required for action
ConsensusPBFT (Practical Byzantine Fault Tolerance)Proven in production blockchain systems
Audit trailEd25519 SIGIL hash chainEvery vote cryptographically signed + chained
Human gateMandatory for lethal force2-person rule. No autonomous lethal action.
Appeal window4 hours post-decisionAny council member can trigger re-vote

Attack vectors mitigated: Compromised agent (tolerated), Sybil attack (identity-bound), DDoS (air-gap capable), Insider threat (2-person rule), Supply chain (Morris-II scanner + Aegis gate).

📦 Installation & Deployment

DEFONEOS deploys in three modes: sovereign edge (air-gapped), hybrid (edge + sovereign cloud), and sovereign cloud (UK GCP/AWS regions only).

Quick Start (Development)

# Clone the sovereign substrate git clone https://github.com/CSOAI-ORG/defoneos.git cd defoneos # Install DEFONEOS OS pip install -e . # Start the 5-service stack python -m defoneos.start --mode=dev # Verify curl http://localhost:3101/mcp # SOV3 cognition curl http://localhost:3200/health # BFT council curl http://localhost:8080/ # Cesium globe

Production Deployment (Sovereign Edge)

# Air-gapped deployment python -m defoneos.deploy \ --mode=airgap \ --pqc=ML-DSA-65 \ --jsp=936 \ --council=33 \ --quorum=22 # Generates: # - JSP 936 compliance certificate # - BFT council keypair per agent # - SIGIL genesis block # - Cesium globe with local terrain data
ModeLatencyConnectivityUse Case
Sovereign Edge<10msAir-gappedForward operating base, ship, vehicle
Hybrid<50msSecure VPN to sovereign cloudGarrison, HQ, training
Sovereign Cloud<100msUK GCP/AWS regionStrategic HQ, multi-site federation
DEFONEOS · CSOAI Ltd · UK Companies House 16939677 · Apache 2.0 · Ed25519: 7f3a...c9e2 · 🐉