Britain's first open-source Sovereign Defence OS. Five layers. Thirty sensor MCPs. One hundred eighty-eight tools. Zero foreign dependencies.
Sensor → Fusion → Cognition → Command → Compliance
Satellite, maritime, air, land, cyber, civil services
AI tools callable from any agent or integration
Sovereign UK infrastructure only. No CLOUD Act exposure.
DEFONEOS is not a monolith. It is a composable, open-source operating system where each layer is independently deployable, independently auditable, and independently swappable. MOD can replace any component without touching the rest.
Every action generates a SIGIL receipt (Ed25519-signed hash chain). JSP 936 compliance certificates auto-generated. Article 50 AI-content passports issued per interaction. Full audit trail replayable by regulators.
Cursor-on-Target (CoT) protocol for NATO interoperability. 33-agent Byzantine Fault Tolerant council gates every consequential action. 22-of-33 quorum required for escalation. No single point of failure.
Mamba-2 SSM (16-dim state) compresses streaming sensor data. 14 neural models for vision, NLP, anomaly detection. Intuition engine detects emerging threats 40s before threshold alerts. Cross-model reasoning via bridge_think.
350M buildings (OpenStreetMap). Real terrain (OS Terrain). 17+ live data layers (AIS, satellite, air quality, weather, seismic). All fused into a single 3D globe. MOD-grade situational awareness.
Sentinel-Hub satellite. AIS maritime tracking. AISstream. OpenAQ air quality. ONS statistics. Companies House. GDELT OSINT. RTSP cameras. MQTT IoT. OS Open Data. All as MCP servers — pluggable, hot-swappable, sovereign.
Every data source in DEFONEOS is an MCP (Model Context Protocol) server. This means any AI agent — SOV3, Claude, GPT, Gemini — can query any sensor through a standard interface. No vendor lock-in. No proprietary APIs.
| # | MCP Server | Domain | Data Type |
|---|---|---|---|
| 1 | sentinel-hub-mcp | Satellite | Sentinel-1/2/3 imagery (Copernicus) |
| 2 | os-opendata-mcp | Geospatial | Ordnance Survey terrain + buildings |
| 3 | data-gov-uk-mcp | Government | GOV.UK open datasets |
| 4 | companies-house-mcp | Corporate Intel | UK company registry |
| 5 | ons-statistics-mcp | Demographics | Office for National Statistics |
| 6 | gdelt-news-mcp | OSINT | Global news events (GDELT Project) |
| 7 | openaq-air-mcp | Environment | Global air quality monitoring |
| 8 | aisstream-maritime-mcp | Maritime | Live AIS vessel tracking |
| 9 | rtsp-camera-mcp | Visual | RTSP IP camera feeds |
| 10 | mqtt-bridge-mcp | IoT | MQTT sensor bridge (IoT devices) |
| 11 | defoneos-maritime-mcp | Defence | Dark vessel detection + EEZ monitoring |
| 12 | defoneos-airspace-mcp | Defence | Airspace awareness + ADS-B tracking |
| 13 | defoneos-cyber-mcp | Defence | Cyber threat intelligence + IDS |
| 14 | defoneos-counterdrone-mcp | Defence | C-UAS detection + RF + acoustic |
| 15 | defoneos-jsp936-mcp | Compliance | JSP 936 audit trail generation |
| 16 | defoneos-bft-mcp | Governance | 33-agent BFT council voting |
| 17 | defoneos-pqc-mcp | Security | Post-quantum crypto operations |
| 18 | defoneos-medevac-mcp | Defence | MEDEVAC routing optimisation |
| 19 | defoneos-logistics-mcp | Defence | Supply chain + logistics tracking |
| 20 | defoneos-sigint-mcp | Defence | RF spectrum monitoring |
| 21 | defoneos-humanitarian-mcp | Civil | Disaster response coordination |
| 22 | defoneos-border-mcp | Defence | Border surveillance + anomaly detection |
| 23 | defoneos-ccc-mcp | Defence | Command, Control, Communications |
| 24 | defoneos-ew-mcp | Defence | Electronic warfare spectrum ops |
| 25 | defoneos-nato-mcp | Interop | NATO STANAG compatibility layer |
| 26 | defoneos-aukus-mcp | Interop | AUKUS Pillar II data exchange |
| 27 | defoneos-a2a-mcp | Protocol | Agent-to-Agent (A2A) coordination |
| 28 | defoneos-civil-mcp | Civil | Civil service data integration |
| 29 | defoneos-globe-mcp | Visualisation | CesiumJS 3D globe + data layers |
| 30 | defoneos-swarm-mcp | Autonomy | Mava RL swarm coordination |
DEFONEOS does not use a single LLM. It uses SOV3 — an Organic Open World Model that combines multiple neural architectures into a single sovereign cognition engine.
| Component | Architecture | Role |
|---|---|---|
| Mamba-2 SSM | State-Space Model (16-dim) | Compresses streaming sensor data. Long-context memory without attention cost. |
| Left MoE | Mixture of Experts | Analytical reasoning: math, logic, compliance, risk assessment |
| Right MOM | Mixture of Models | Perception: vision, audio, pattern detection, spatial reasoning |
| Intuition Engine | 1Hz SIGIL → Mamba state | Detects emerging patterns before threshold alerts. 40s lead time on average. |
| BIG BRAIM | 8 category winners | Routes queries to best model: coding, reasoning, long-context, multilingual, edge, TTS, embedding, router |
| Quantum Layer | QAOA + VQE + Grover | Care weight optimisation + memory importance scoring + quantum search |
DEFONEOS never executes a consequential action without council approval. 33 independent agents vote on every escalation. The system tolerates up to 11 compromised agents (f=11 in a 3f+1 system) without any incorrect decision being made.
| Parameter | Value | Rationale |
|---|---|---|
| Council size | 33 agents | 3f+1 with f=11 (tolerates 33% Byzantine) |
| Quorum | 22-of-33 | Supermajority (2/3) required for action |
| Consensus | PBFT (Practical Byzantine Fault Tolerance) | Proven in production blockchain systems |
| Audit trail | Ed25519 SIGIL hash chain | Every vote cryptographically signed + chained |
| Human gate | Mandatory for lethal force | 2-person rule. No autonomous lethal action. |
| Appeal window | 4 hours post-decision | Any council member can trigger re-vote |
Attack vectors mitigated: Compromised agent (tolerated), Sybil attack (identity-bound), DDoS (air-gap capable), Insider threat (2-person rule), Supply chain (Morris-II scanner + Aegis gate).
DEFONEOS deploys in three modes: sovereign edge (air-gapped), hybrid (edge + sovereign cloud), and sovereign cloud (UK GCP/AWS regions only).
| Mode | Latency | Connectivity | Use Case |
|---|---|---|---|
| Sovereign Edge | <10ms | Air-gapped | Forward operating base, ship, vehicle |
| Hybrid | <50ms | Secure VPN to sovereign cloud | Garrison, HQ, training |
| Sovereign Cloud | <100ms | UK GCP/AWS region | Strategic HQ, multi-site federation |