The £500m UK Sovereign AI Fund's July competition, and the substrate already on the register

The Department for Science, Innovation and Technology opened the £500m Sovereign AI Fund market-engagement round in April 2026. The full competition is expected to launch in July. The Strategic Assets Programme expression-of-interest window has been used by the Mickai team, with a submission filed on 5 June 2026.

This article sets out what the fund is asking for, what the structural test for an answer looks like, and how the substrate filed under the Mickai portfolio at the UK Intellectual Property Office maps to each test.

What the fund is for

The fund follows the AI Opportunities Action Plan, the National AI Strategy, and the AI Safety Institute's evaluation programme. The stated purpose is to underwrite UK-controlled AI capability where the alternative is reliance on foreign hyperscaler infrastructure for nationally significant workloads. The market-engagement round asked applicants to describe their model, their data residency, their security posture, their accountability arrangement, and the basis on which the capability is described as sovereign.

The implicit test is whether the applicant can demonstrate sovereignty as an architectural property rather than as a documented commitment.

That test has a specific engineering shape.

The structural test

Sovereignty as an architectural property has the following components. Each is independently verifiable.

The first component is residency. The inference, the retrieval, the audit, the long-term memory, and the policy-evaluation paths all execute on hardware physically possessed by the operator, in locations the operator controls, with no committed-to-by-default outbound dependency on a foreign-owned service.

The second component is key custody. The private keys against which audit records are sealed, against which actor identities are bound, and against which tenancy isolation is enforced are held in TPM 2.0 hardware or equivalent attested silicon on the operator's deployment. The vendor has neither read nor write access.

The third component is post-quantum durability. The audit signatures are produced under the FIPS 204 ML-DSA-65 scheme that the National Cyber Security Centre has named as the migration target, from inception. A signature produced today is intended to verify after the quantum transition.

The fourth component is operator-side audit. Every action the system takes is signed against the operator's key at the moment of generation, against a verifier the operator publishes, in a format a regulator can verify offline without trusting the vendor.

The fifth component is runtime perimeter. Every AI agent process runs inside a runtime perimeter that mediates at the syscall layer, classifies destructive actions, and signs the action for post-event verification. The perimeter runs at a privilege the agent cannot reach.

The sixth component is federation. Cooperation with peer institutions is governed by signed attestations across hardware-attested identities, with cross-boundary records logged against an append-only ledger.

The seventh component is disconnection. The system continues to perform its declared function when the operator disconnects every external network link, for a stated minimum duration the operator can specify.

A sovereign-AI procurement that does not test for these seven components is procuring sovereignty-themed AI, not sovereign AI.

The substrate filed under the Mickai portfolio

Each of the seven components above maps to a filed UK patent application under the Mickai portfolio. The Open Audit Record is filed at the UK IPO under GB2610413.3. The wider portfolio of 101 filed applications, with approximately 2,234 claims across the substrate, covers the runtime perimeter, the inverse-action ontology, the pre-commit dry run, the federated fleet protocol, the hardware-attested identity arrangement, and the post-quantum signing path. The portfolio has been filed in the United Kingdom under one named inventor between 30 March 2026 and 10 June 2026.

The substrate is not theoretical. It is engineered. The Mickai Sovereign Intelligence Operating System runs on operator hardware, signs every action under FIPS 204 ML-DSA-65, mediates every agent action at the syscall layer through the runtime perimeter, and exposes a browser-resident WebAssembly verifier the regulator can run offline.

What the fund can do with a substrate that already exists

A sovereign-AI fund whose disbursements depend on procuring sovereignty as an architectural property has an unusually clean structural choice. The fund can require, as part of the call-off acceptance criteria, that an applicant identify the patent application reference covering each of the seven structural components. An applicant unable to identify the references is not, for the purpose of the fund, satisfying the structural property by construction.

The fund is not, by this reading, in the position of having to underwrite the development of a substrate that does not yet exist. The fund is in the position of being able to underwrite the deployment of a substrate that is already on the register.

The procurement velocity changes when that is the case. The fund's disbursements can move into pilot deployments at NHS trusts, defence primes, financial-regulator counterparties, and council consortiums within the fund's first allocation window, rather than over the eighteen-to-thirty-month development cycle a fund would otherwise underwrite.

What the July call-off can specify

The July competition can specify the seven structural properties as call-off acceptance criteria. The competition can require the applicant to identify the patent application reference for each property. The competition can require the audit record to be signed under FIPS 204 ML-DSA-65 from contract commencement. The competition can require the runtime perimeter to be operational at deployment. The competition can require the disconnection test as part of acceptance.

If those properties are specified, the competition becomes a procurement of sovereign capability rather than a development grant. The Mickai Sovereign Intelligence Operating System is built to be procured against that specification.

The Strategic Assets Programme expression of interest is in. The substrate is on the public register. The July call-off can specify the test and the substrate can pass it.