No UK Sovereign Tech Fund for maintaining critical open source infrastructure
Germany's Sovereign Tech Fund has invested over €24.6m in more than 60 critical open source components since 2022, and a €350m EU-level fund is proposed. UK software stacks are more than 90 per cent dependent on open source, and Log4j reached the NHS. Partial cover exists. The Software Sustainability Institute's £4.8m Research Software Maintenance Fund covers research software only, OpenSSF's Alpha-Omega is US corporate philanthropy with no UK direction, and corporate sponsorship stays ad hoc. A costed blueprint sits in the UK Day One proposal from 2024: a £12.5m-a-year UKRI-administered fund, £7.5m for maintenance and £5m for innovation. OpenUK's October 2025 recommendations to UKRI include a sovereign tech fund. Nothing has been announced as of mid-2026, and the £500m Sovereign AI Fund is an equity venture fund rather than commons maintenance.
The state and the economy free-ride on unpaid maintainers of components they cannot function without. One funded UK maintainer per critical dependency is cheap insurance against the next Log4j, and Germany has run the delivery model at €15-20m a year since 2022.
A UK Sovereign Tech Fund inside DSIT or UKRI at £10-15m a year. It would issue service contracts rather than grants to maintainers of dependencies critical to government and national infrastructure, with a rapid security-response arm. The Sovereign Tech Agency's operating model is published, and the UK Day One costing is done.
// State-led: Instrument: DSIT/UKRI budget line issuing maintainer service contracts.
A fully costed, Germany-proven model sits unfunded while national infrastructure free-rides on unpaid maintainers, and OpenUK's 2025 recommendations to UKRI opened a live decision moment.
One gap, several dossiers: entries folded into this one (3)
The research pass surfaced this gap independently in more than one domain. Those entries are merged here so the map counts it once: four dossiers independently asked for the same DSIT-sponsored, UKRI-administered maintenance fund on the German model.
№ 107 · No UK Sovereign Tech Fund paying for maintenance of critical open-source infrastructure (Portable sovereignty)
Germany's Sovereign Tech Agency has funded maintenance of critical open-source components since 2022 and an EU equivalent is proposed; the UK has nothing. No DSIT or UKRI stream pays maintainers of the open components the sovereignty stack depends on (Matrix server implementations, cryptographic libraries, local-first and inference tooling). UK Day One / Centre for British Progress published a costed £12.5m/yr proposal; OpenUK documents OSS underfunding as a strategic sovereignty risk. The £500m Sovereign AI Unit invests venture-style in companies, not maintenance. The Matrix.org Foundation, steward of a UK-origin protocol run as critical national infrastructure abroad, has publicly struggled to fund core development.
Its fill: A DSIT-sponsored, UKRI-administered UK Sovereign Tech Fund (~£12.5m/yr initially) issuing maintenance contracts (not competitive grants) for critical open-source components, guided by a published criticality assessment of UK digital dependencies.
№ 143 · No UK Sovereign Tech Fund for critical open-source maintenance (Funding (lens))
Germany's Sovereign Tech Agency has, since 2022, procured maintenance and security work on open-source components underpinning the state and economy. The UK has no equivalent: UKRI/Software Sustainability Institute's Research Software Maintenance Fund covers research software only; OpenUK-UKRI workshops (2025-26) produce recommendations, not money; NCSC issues guidance without funding. UK Day One has published a costed proposal (£12.5m/yr, UKRI-distributed) but as of mid-2026 funding critical OSS as a public good is absent from UK policy.
Its fill: A DSIT-sponsored Sovereign Tech Fund (£12.5-25m/yr) issuing maintenance contracts, security audits and bug bounties for open-source software the UK public sector and critical infrastructure depend on, housed in UKRI or as an ARIA-adjacent unit, per the UK Day One blueprint.
№ 156 · No UK equivalent of Germany's Sovereign Tech Fund for critical open-source maintenance (Policy (lens))
Germany's Sovereign Tech Fund invested over €23m in ~60 critical open-source projects in 2022-24, and an EU-level fund is being designed. The UK has no equivalent: no fund pays for maintenance and security of the open-source components government services and national infrastructure depend on. OpenUK has a funding blueprint 'under discussion' with the public sector, and the Centre for British Progress published a proposal for a UK open-source fund (December 2025) citing a £15bn+ contribution of OSS to the UK economy. DSIT's Digital Standards Strategy 2026-30, the Open Standards Principles and the Procurement Act 2023 address standards and buying, not maintenance; UKRI competitions fund innovation, not upkeep.
Its fill: A DSIT-sponsored UK Sovereign Tech Fund: an arm's-length body (~£20-30m/year initially) contracting maintainers of open-source components critical to UK public services, using Germany's commissioning model, underpinned by a published criticality assessment of open-source dependencies across government.