DEFONEOS Sovereignty Architecture

UK-first data residency. Air-gap capable. AUKUS Pillar 2 compatible. No US export control. No cloud lock-in.

100%

UK Data Residency

US Export Dependencies

Deployment Modes

🇬🇧 What "Sovereign" Means for DEFONEOS

Sovereignty is not a marketing term. It has specific technical, legal, and operational implications. DEFONEOS is sovereign by design — meaning sovereignty is enforced in the architecture, not promised in a brochure.

Dimension	What Sovereign Means	How DEFONEOS Enforces It
Data residency	All operational data stays on UK soil or UK-controlled infrastructure.	Default deployment is local/edge. Cloud is optional and configurable. Data classification labels route data to appropriate zones.
Software provenance	The codebase is not controlled by a foreign entity.	Apache 2.0 open source. Copyright CSOAI Ltd (UK Companies House 16939677). No foreign upstream dependencies that can be revoked.
Cryptographic sovereignty	Encryption keys are generated and held under UK control.	Ed25519 keys generated locally. Stored in Apple Secure Enclave or UK HSM. No key escrow to foreign entities. NIST PQC ready.
Operational sovereignty	The system functions without foreign infrastructure.	Air-gap mode. Local models (Ollama). No required internet connection. No required cloud API. Full operation on UK LAN.
Legal sovereignty	The system is not subject to foreign export control.	UK-developed software. Not subject to US EAR/ITAR (unlike US-origin AI). AUKUS Pillar 2 compatible by design.
Governance sovereignty	Decisions are made by UK-controlled entities.	BFT council operates on UK infrastructure. CSOAI Ltd controls charter. No foreign override. No backdoor keys.

🏗️ Deployment Modes

1. Local Development

Single machine. Full capability.

MacBook (M2/M3/M4) or Linux
Ollama local models
All MCPs running locally
SIGIL chain on local disk
No network required

DEFAULT

2. Production Cluster

Multi-node sovereign mesh.

M4 (primary) + M2 (edge) + GCP VM (UK region)
SSH tunnels with KeepAlive
Model routing across nodes
PostgreSQL on UK VM
LAN + controlled VPN

ACTIVE

3. Air-Gapped

Classified environment. Zero external network.

No internet. No cloud. No external API.
Local models only (Ollama)
Data ingestion via Thunderbolt diode
SIGIL chain batch-synced on return
Battery-capable (M2)

TACTICAL

4. Coalition Mode

Multi-national deployment with sovereignty preservation.

Each nation runs own DEFONEOS instance
Federated SIGIL chain (cross-attested)
BFT council includes allied agents
Data sharing governed by classification labels
AUKUS / Five Eyes compatible
No single nation has override

5. Edge Deployment

Forward operating base or field HQ.

M2 MacBook Air (man-packable)
USB-C battery bank (10-12h operation)
Local 3B models for real-time inference
Sensor data via MQTT/RTSP local network
SIGIL chain deferred sync
Fanless. Low thermal signature.

🔐 Cryptographic Sovereignty

Key Management

Key Type	Algorithm	Generation	Storage	Usage
SIGIL signing	Ed25519	Local generation (on first boot)	Apple Secure Enclave / UK HSM	Sign every SIGIL chain entry
BFT vote	Ed25519	Per-agent keypair	Secure Enclave (per agent)	Sign council votes
API auth	HMAC-SHA256	Admin-generated	UK infrastructure only	MCP authentication
Data at rest	AES-256-GCM	FileVault (native)	Hardware-accelerated	Disk encryption
Tunnel	ChaCha20-Poly1305	SSH native	OS keychain	M2↔M4↔VM tunnels
PQC (future)	ML-KEM-768 / ML-DSA-65	NIST PQC standard	TBD (HSM)	Quantum-resistant signing

No keys are ever transmitted to foreign servers. No key escrow. No third-party key custody. Keys exist only on UK-controlled hardware.

🌐 AUKUS Pillar 2 Compatibility

AUKUS (Australia-UK-US) Pillar 2 focuses on advanced capabilities including AI, quantum, and undersea. DEFONEOS is designed to be AUKUS-compatible from day one:

AUKUS Requirement	DEFONEOS Capability	Status
AI interoperability between allies	MCP standard protocol. Any ally can implement.	READY
Data sharing with classification controls	Classification labels + data diode + federated SIGIL	BUILT
Quantum-resistant cryptography	NIST PQC roadmap. ML-KEM + ML-DSA planned.	ROADMAP
Sovereign infrastructure	Each nation hosts own DEFONEOS instance	READY
Export control compliance	UK-developed. Not subject to US EAR/ITAR.	INHERENT
Open standards	Apache 2.0. MCP JSON-RPC. W3C DID. Ed25519.	READY

Note: "AUKUS certified" claims require a signed letter on file. DEFONEOS does not claim certification. We claim compatibility by design.

📊 Sovereignty Compliance Checklist

#	Requirement	Status	Evidence
1	UK-registered company	✅ PASS	CSOAI Ltd, Companies House 16939677
2	UK copyright holder	✅ PASS	Apache 2.0, CSOAI Ltd
3	No foreign upstream control	✅ PASS	No single-vendor dependency. All swappable.
4	UK data residency default	✅ PASS	Local-first deployment. Cloud optional.
5	UK key generation	✅ PASS	Ed25519 generated locally. Secure Enclave.
6	Air-gap capability	✅ PASS	Tested. Local models. No network dependency.
7	No US export control	✅ PASS	UK-developed. Not EAR/ITAR controlled.
8	BFT governance (no foreign override)	✅ PASS	33-agent council. 23/33 quorum. No backdoor.
9	Open source auditability	✅ PASS	Apache 2.0. Full code published.
10	SIGIL audit trail	✅ PASS	Ed25519 hash chain. Append-only.

🆚 DEFONEOS vs US-Origin AI Systems

Dimension	US-Origin (Palantir, Anduril, etc.)	DEFONEOS (UK)
Export control	Subject to US EAR/ITAR. Export license required.	UK-developed. No US export control on DEFONEOS layer.
Data residency	US cloud (AWS GovCloud, Azure Gov). Physical US.	UK soil. Local/edge default. No foreign cloud required.
Key custody	US provider may hold keys (key escrow).	Keys in UK Secure Enclave. No escrow.
Governance	US corporate policies. Subject to US law (CLOUD Act).	UK BFT council. Subject to UK law only.
Source code	Proprietary. Closed. Cannot audit.	Open source. Apache 2.0. Fully auditable.
Cost model	Per-seat licensing. £100K-£2M+/yr.	Free OSS base. Pay only for certification + support.
Vendor lock-in	High. Proprietary formats. Migration cost prohibitive.	Zero. Open formats. Standard protocols. MCP interoperability.
Sovereignty risk	US CLOUD Act allows US government data access.	No US jurisdiction. UK only.

Summary

DEFONEOS is the UK's sovereign defence AI OS. Sovereign by design — enforced in architecture, not promised in marketing. UK data, UK keys, UK governance, UK law. Air-gapped capable. AUKUS-compatible. No US export control. No cloud lock-in. No vendor dependency. This is what technological sovereignty looks like.