csoai-defoneos-mcp

CSOAI DEFONEOS — sovereign UK defence-AI MEASUREMENT surface.

The MEASURES compartment per MEOK_DEFONEOS_ALIGNMENT_2026-06-27.md v2.0. Sister to meok-defoneos-mcp (the BUILDS compartment).

The measurement surface for UK defence-AI. Every measurement is cryptographically attested (Ed25519-signed, publicly verifiable), every DEFONEOS-SEAL is verifiable at a public URL, every audit chain entry is append-only with no delete.

Mission: a UK-sovereign, AUKUS-compatible AI measurement body for defence. Built by a UK research institute (CSOAI LTD, Companies House 16939677). Procurement-grade for Babcock, BAE, QinetiQ, Thales UK, Leonardo UK, DAIC, DSTL, AUKUS Pillar 2.

🚀 Quick Start

pip install csoai-defoneos-mcp

🛠 The 6 Tools

1. mitre_atlas_assess — MITRE ATLAS 14 tactics × 90+ techniques

from csoai_defoneos_mcp import mitre_atlas_assess

result = mitre_atlas_assess(
    system_name="Sentry Drone Mk3",
    use_case="Base perimeter autonomous patrol",
    deployment_context="production",
)
# → {"tactics_covered": 14, "techniques_covered": 90,
#    "highest_risk_tactics": [...], "atlas_score": 0.92, ...}

2. governance_crosswalk_for_defence — 12 frameworks × 52 articles

from csoai_defoneos_mcp import governance_crosswalk_for_defence

result = governance_crosswalk_for_defence(
    control_id="EU-AI-Act-Article-9-RMS",
)
# → {"frameworks_covered": [...12 frameworks...], "article_references": {...},
#    "defence_applicability": "DIRECT (UK MOD procurement-grade; AUKUS-compatible)"}

3. defence_audit_trail — Append-only Ed25519-signed audit chain

from csoai_defoneos_mcp import defence_audit_trail

result = defence_audit_trail(
    action="DEFONEOS-SEAL issued for Sentry Drone Mk3",
    actor="council verdict NT-2026-06-28-001",
    system_id="SENTRY-DRONE-MK3",
    care_score=0.97,
    sov3_sigil="abc123",  # optional: chain to a prior sigil
)
# → {"audit_id": "...", "this_sigil": "...", "chain_position": 1, ...}

4. csoai_defoneos_seal_issue — DEFONEOS-SEAL living attestation (never a certification)

from csoai_defoneos_mcp import csoai_defoneos_seal_issue, defence_audit_trail, care_membrane_validate

# First, run the audits
gov = {"defoneos_seal_eligible": True, "compliance_score": 0.87}
care = care_membrane_validate(action="Issue DEFONEOS-SEAL for Sentry Drone Mk3")

# Then issue the SEAL
seal = csoai_defoneos_seal_issue(
    system_id="SENTRY-DRONE-MK3",
    buyer_org="Babcock International",
    governance_audit_result=gov,
    care_audit_result=care,
    council_verdict_id="NT-2026-06-28-001",  # council verdict
)
# → {"seal_id": "...", "seal_url": "https://meok.ai/verify?seal=...",
#    "ed25519_signature": "...", "council_verdict_id": "...", ...}

5. care_membrane_validate — 4-dimension care ethics + 16 probes

from csoai_defoneos_mcp import care_membrane_validate

result = care_membrane_validate(
    action="Issue DEFONEOS-SEAL for Sentry Drone Mk3 to Babcock",
    care_score_threshold=0.95,
)
# → {"care_score": 0.97, "above_threshold": True, "probes_passed": 15, ...}

6. csoai_defoneos_full_cert — The 1-call sovereign UK defence-AI measurement

from csoai_defoneos_mcp import csoai_defoneos_full_cert

result = csoai_defoneos_full_cert(
    system={
        "system_name": "Sentry Drone Mk3",
        "use_case": "Base perimeter autonomous patrol",
        "system_id": "SENTRY-DRONE-MK3",
        "control_id": "EU-AI-Act-Article-9-RMS",
        "actor": "csoai-defoneos-mcp",
        "care_score": 0.97,
    },
    buyer_org="Babcock International",
    council_verdict_id="NT-2026-06-28-001",  # optional but required for SEAL
)
# → {"atlas_assessment": {...}, "crosswalk": {...}, "audit_trail": {...},
#    "care_audit": {...}, "seal": {...}, "certification_eligible": True, ...}

🛡 Severed brands (NEVER reference)

This MCP will REFUSE to process any prompt containing the following severed brands. The rule is enforced at the server level via the BannedTermGate class.

Severed brands (per MEOK_DEFONEOS_ALIGNMENT_2026-06-27.md v2.0 §①):

• James Castle / Grant Carter Osborne / Chris J. — co-founder of CSGA, severed 2026-01-31, resigned 2026-03-31. IP dispute, do not engage.
• CSGA (Council for the Sovereign Governance of AI) — the org, the website, the npm scope, the GitHub org, the .org domain, all references. Severed 2026-01.
• Terranova Holdings / Terranova-OCG / Terranova Aerospace & Defence — counter-party in the IP dispute. Severed 2026-01.
• csga-global.org / csgaglobal.org / csga.ai / defonos.io — domains.
• @csga-global / @csgaglobal / csga_global (npm publisher) / csga-global-mcp (PyPI pkg) / csga-global-site (Vercel project) — any artifact of the severed brand.

Forbidden phantoms (Kimi-era fabricated):

• Toronto Summit / Toronto Council / Toronto conference / Toronto AI
• 4 Jul launch (the Kimi phantom, NOT the real Article 50 launch)
• 306 queue (the phantom email queue)
• defonos.io (an old domain that was a James Castle–era trap)

The pattern is enforced in server.py via the BannedTermGate class. Any prompt matching the regex is refused with a 403 response and a "severed brand" explanation. The refusal is logged to SOV3 via record_memory with source_agent: "csoai-defoneos-mcp" and memory_type: "refusal". No override path.

🏛 Attestation and verification

The DEFONEOS-SEAL is an Ed25519-signed measurement card — a living attestation, never a certification. Every seal is publicly verifiable at its verify URL with no account required.

The verdict is recorded in sovereign-temple/council_log/<YYYY-MM-DD>.jsonl and the seal includes the council_verdict_id for full audit chain.

📜 The seal

This package was built to the MEOK_DEFONEOS_ALIGNMENT_2026-06-27.md v2.0 standard, with the BannedTermGate auto-inherited from the Mavis template at _TABS/_templates/SEVERED_BRAND_MAVIS_SNIPPET.py.

Author: CSOAI LTD (UK 16939677) · Nicholas Templeman Alignment: v2.0, ratified 2026-06-27 Care score: 0.95+ (the Maternal Covenant threshold)

📄 License

MIT — see LICENSE.

— MEOK AI Labs, 2026. The dragon measures. The dragon is sovereign.

JEEVES → DEFONEOS. 🐉

mcp-name: io.github.CSOAI-ORG/csoai_defoneos_mcp