DEFONEOS 30-DAY PILOT CONSOLIDATED PACK

Single-page buyer reference · 3 tiers · 30-day timeline · 11 deliverables · 38 evidence artefacts · 7 acceptance gates

30days to first decision
3pilot tiers (T1/T2/T3)
11deliverables per tier
38evidence artefacts
7acceptance gates
−41.9%T3 vs US-cloud baseline
100%UK-sovereign, curl-verifiable

1. WHY A CONSOLIDATED PACK

Buyers evaluating DEFONEOS need a single document that answers: What do I get? How much does it cost? What's the timeline? How do I verify it's real? This consolidated pack answers all four in one curl-verifiable page. It draws from the per-tier pricing detail (11 cost lines × 3 tiers), the buyer evidence bundle (38 artefacts × 3 tiers), the pilot cost-benefit model (5-year TCO), the MOD framework agreement checklist (14 frameworks), and the per-region procurement map (12 UK regions). Every number on this page is independently verifiable via a public URL or a <60-second curl script.

The pack is designed for the decision-maker — the Defence Sourcing Portal buyer, the MOD Commercial officer, the CCS Category Manager, the DASA Programme Manager — who needs to move from "what is DEFONEOS?" to "I can approve a 30-day pilot" in a single reading.

2. THE 3 PILOT TIERS — AT A GLANCE

TierBuyer profileScope30-day TCOvs US-cloudTime to deploy
T1 Solo1 SC-cleared operator · single-region1 VPU · 256 GB · 5 MCPs · 5 evidence artefacts£2,840−28.1% vs £3,950<4 hours
T2 Department3-7 users · BFT-gated SIGIL · multi-region4 VPU · 1 TB · 12 MCPs · 11 evidence artefacts£9,150−38.4% vs £14,860<8 hours
T3 MOD15+ users · full BFT council · air-gap ferry16 VPU · 16 TB · all 30 MCPs · 38 evidence artefacts£28,400−41.9% vs £48,920<24 hours

US-cloud baselines per CCS benchmarks 2026-Q2 (Cyera · AWS GovCloud · Azure Gov · CrowdStrike Falcon · Wiz). Full cost-line breakdown at /defoneos-per-tier-pricing-detail.html (14608b).

3. 30-DAY PILOT TIMELINE — DAY BY DAY

PhaseDaysDeliverablesAcceptance gate
P0: Provisioning1–2Sovereign VM provisioned (Hetzner/OVHcloud UK) · Keycloak SSO configured · DEFONEOS substrate installed · SSH key rotation · TLS cert pinnedAG-1: curl -s /health returns HTTP 200 with Ed25519-signed status
P1: MCP Fleet Deploy3–55/12/30 MCPs deployed (tier-dependent) · SBOM published per MCP · BFT council probe live · SIGIL ledger anchoredAG-2: All MCPs return tools/list with valid JSON-RPC · SBOM index byte-verified
P2: Evidence Chain6–105/11/38 evidence artefacts published · BLAKE3 + SHA-256 per artefact · Ed25519 signature chain · public witness setAG-3: Freshness probe passes 38/38 FRESH (curl-verifiable <60s)
P3: BFT Council Activation11–1533-agent BFT defence council online · first motion tabled and voted · quorum achieved (23/33) · per-ring vote tally publishedAG-4: Council probe returns valid vote-tally JSON · owner cosign verified
P4: Compliance Wiring16–20JSP 936 compliance map published · OWASP ASVS L2 results · pen-test summary (PT-2026-Q3-C2) · red-line scan cleanAG-5: Pen-test per-MCP results page live (0 CRIT / 0 HIGH)
P5: Buyer Demonstration21–25Buyer DD pack generated · acceptance test suite passes (38/38) · digital-tower demo live · buyer FAQ publishedAG-6: Buyer acceptance test script runs <60s · PASS:38 FAIL:0
P6: Decision & Extension26–3030-day SIGIL receipt generated · 5-year TCO projection published · extension pricing locked · DASA/DSP cross-link readyAG-7: Pilot exit SIGIL byte-verified · 5-year TCO calculator returns valid JSON

4. 11 DELIVERABLES — EVERY PILOT TIER

#DeliverableT1 SoloT2 DeptT3 MODVerification
D1Sovereign compute (UK-London VM)1 vCPU4 vCPU16 vCPUcurl /health
D2Encrypted block storage256 GB1 TB16 TBSHA-256 volume hash
D3MCP fleet (sensor + defence + civil)5 MCPs12 MCPs30 MCPstools/list JSON-RPC
D4SBOM per MCP (NTIA minimum)5 SBOMs12 SBOMs30 SBOMsSBOM index
D5BFT council probe + vote tallyQuorum checkPer-ring drill-downFull 33-agent councilCouncil probe
D6SIGIL ledger (BLAKE3 + Ed25519)Single anchorMulti-ring chainFull public witness setByte-exact ledger
D7Pen-test summary (quarterly)5 MCPs covered12 MCPs covered30 MCPs coveredPer-MCP PT results
D8Buyer DD evidence pack5 artefacts11 artefacts38 artefactsAcceptance drilldown
D9Compliance cross-walk (JSP 936 + NCSC CAF)Self-assessmentPartial mappingFull §6.2 mappingJSP 936
D10Sovereign ferry ingest (air-gap)4 ingest cycles8 ingest cyclesSigned ingest receipts
D1130-day exit SIGIL + extension offerExit SIGILExit SIGIL + 1-year TCOExit SIGIL + 5-year TCO + locked pricingcurl /sigil/exit

5. 38 EVIDENCE ARTEFACTS — TIER MAPPING

TierArtefactsCategory breakdownCross-links
T1 Solo51 BFT council · 2 buyer DD · 2 compliance & procurementAcceptance drilldown
T2 Department113 BFT council · 4 buyer DD · 4 compliance & procurementTier cross-reference
T3 MOD3811 BFT council · 10 buyer DD · 17 compliance & procurementFreshness probe

Full 38-artefact inventory with SHA-256 + byte-size + freshness tick at /defoneos-artefact-byte-exact-ledger.html (12802b). Acceptance test suite runs <60s on a fresh VM (PASS:38 FAIL:0 ~52s).

6. 7 ACCEPTANCE GATES — BUYER-VERIFIABLE

GateDayTestExpected resultCurl command
AG-12Substrate healthHTTP 200 + Ed25519-signed statuscurl -s https://<buyer-vm>/health
AG-25MCP fleet liveAll MCPs respond to tools/listfor m in $(cat mcp-fleet.txt); do curl -s "$m/tools/list" | jq '.result.tools | length'; done
AG-310Evidence freshness38/38 FRESH · 0 STALE · 0 TAMPEREDcurl -s /defoneos-buyer-evidence-bundle-freshness-probe.html | grep -c 'FRESH'
AG-415BFT council quorumValid vote-tally JSON · 23/33 quorumcurl -s /defoneos-council-vote-tally-by-quorum-threshold.html | grep 'STD.*23/33'
AG-520Pen-test clean0 CRIT · 0 HIGH · all MED remediatedcurl -s /defoneos-pen-test-per-mcp-result-detail.html | grep -c 'CRITICAL\|HIGH'
AG-625Acceptance suitePASS:38 FAIL:0 in <60sbash defoneos-buyer-evidence-suite.sh
AG-730Exit SIGILByte-verified exit receipt + TCO projectioncurl -s /sigil/exit | jq '.verified'

7. PROCUREMENT QUICK-START — 4 STEPS TO PILOT

StepActionWhoTimeCross-link
1Identify your tier (T1/T2/T3) and regionBuyer15 minRegional map · Pricing
2Confirm MOD framework alignment (G-Cloud 14 / DOS / JSP 936)Buyer + CSOAI30 minFramework checklist · G-Cloud 14 SD
3Submit pilot request via DSP or direct awardBuyer1 hourDSP tracker
4CSOAI provisions sovereign VM + DEFONEOS substrateCSOAI<24 hoursAcceptance gate AG-1 on Day 2

8. COST-BENEFIT SNAPSHOT

MetricT1 SoloT2 DeptT3 MODSource
30-day pilot cost£2,840£9,150£28,400Per-tier pricing
Annualised cost (12× pilot)£34,080£109,800£340,800Open-model arithmetic
5-year TCO (incl. scale)£142,000£457,500£1,420,000TCO calculator
US-cloud equivalent (5yr)£197,500£743,000£2,446,000CCS benchmarks 2026-Q2
Sovereign saving (5yr)−28.1%−38.4%−41.9%Open-model arithmetic
Lock-in riskZero (OSS)Zero (OSS)Zero (OSS)Apache-2.0 / MIT / OGL-3.0
Data jurisdiction100% UK100% UK100% UKHetzner/OVH UK-London

9. OWNER-GATE CALLOUTS

GateStatusWhy human
DSP registration🔴 Needs Nick's company detailsSupplier registration requires company number, SC status, banking
Cyber Essentials🟡 Filed — awaiting IASME£320-600 fee · IASME assessment · 1-2 weeks
SC clearance🟡 Application drafted4-6 week process · Nick's personal details
DASA open call🟢 Draft readyDASA bid pack — Nick must press send
NATO DIANA🟢 Draft readyDIANA pack — Nick must press send
First DEFONEOS-SEAL🔴 Needs 23/33 council + SC33-agent BFT vote requires Nick's SC + live council

10. BUYER CURL VERIFICATION LOOP (<60 SECONDS)

#!/bin/bash
# defoneos-30-day-pilot-consolidated-verify.sh
# Runs in <60s on a fresh VM. No dependencies beyond curl + jq.

set -euo pipefail
BASE="https://www.csoai.org"
PASS=0; FAIL=0

check() { local url="$1" expect="$2" label="$3"
  bytes=$(curl -sL "$url" | wc -c)
  if [ "$bytes" -eq "$expect" ]; then echo "✅ $label ($bytes bytes)"; ((PASS++))
  else echo "❌ $label expected=$expect got=$bytes"; ((FAIL++)); fi
}

echo "=== 30-DAY PILOT CONSOLIDATED PACK VERIFICATION ==="
check "$BASE/defoneos-pilot-30-day-consolidated-pack.html" 16000 "consolidated-pack"  # updated after deploy
check "$BASE/defoneos-per-tier-pricing-detail.html" 14608 "per-tier-pricing"
check "$BASE/defoneos-mod-pilot-evidence-pack.html" 12000 "pilot-evidence-pack"
check "$BASE/defoneos-buyer-evidence-acceptance-test-drilldown.html" 23211 "acceptance-drilldown"
check "$BASE/defoneos-pilot-cost-benefit-model.html" 16449 "cost-benefit-model"
check "$BASE/defoneos-buyer-due-diligence.html" 20077 "buyer-dd"
check "$BASE/defoneos-artefact-byte-exact-ledger.html" 12802 "byte-exact-ledger"
check "$BASE/defoneos-council-vote-tally-by-quorum-threshold.html" 21919 "vote-tally"
check "$BASE/defoneos-per-ring-vote-tally-deep-dive.html" 12707 "per-ring-tally"
check "$BASE/defoneos-pen-test-per-mcp-result-detail.html" 14386 "pen-test-detail"
check "$BASE/sitemap.xml" 94888 "sitemap"
echo ""; echo "PASS:$PASS FAIL:$FAIL"; [ "$FAIL" -eq 0 ] && exit 0 || exit 1