No UK Sovereign Tech Fund for maintaining critical open source infrastructure
Germany's Sovereign Tech Fund (Sovereign Tech Agency) has invested over €24.6m in 60+ critical open source components since 2022, and a €350m EU-level fund is proposed; the UK, whose software stacks are 90%+ OSS-dependent (Log4j hit the NHS), has no equivalent. Partial coverage: SSI's £4.8m Research Software Maintenance Fund covers research software only; OpenSSF's Alpha-Omega is US corporate philanthropy not UK-directed; corporate sponsorship is ad hoc. A costed blueprint exists in the UK Day One proposal (Milton, Osborne, Pickering, 2024) for a £12.5m/year UKRI-administered fund (£7.5m maintenance, £5m innovation), and OpenUK's October 2025 recommendations to UKRI include a sovereign tech fund. Nothing has been announced as of mid-2026; the £500m Sovereign AI Fund is an equity venture fund, not commons maintenance.
The UK state and economy free-ride on unpaid maintainers of components they cannot function without. One funded UK maintainer per critical dependency is cheap insurance against the next Log4j; Germany has proven the delivery model works at €15-20m/year.
A 'UK Sovereign Tech Fund' inside DSIT or UKRI at £10-15m/year, issuing service contracts (not grants) to maintainers of dependencies critical to government and CNI, with a rapid security-response arm; adopt the Sovereign Tech Agency's published operating model and the UK Day One costing.
// State-led: Instrument: DSIT/UKRI budget line issuing maintainer service contracts.
A fully costed, Germany-proven delivery model sits unfunded while national infrastructure free-rides on unpaid maintainers, and OpenUK's 2025 UKRI recommendations open a live decision moment.
One gap, several dossiers: entries folded into this one (3)
The research pass surfaced this gap independently in more than one domain. Those entries are merged here so the map counts it once: four dossiers independently asked for the same DSIT-sponsored, UKRI-administered maintenance fund on the German model.
№ 107 · No UK Sovereign Tech Fund paying for maintenance of critical open-source infrastructure (Portable sovereignty)
Germany's Sovereign Tech Agency has funded maintenance of critical open-source components since 2022 and an EU equivalent is proposed; the UK has nothing. No DSIT or UKRI stream pays maintainers of the open components the sovereignty stack depends on (Matrix server implementations, cryptographic libraries, local-first and inference tooling). UK Day One / Centre for British Progress published a costed £12.5m/yr proposal; OpenUK documents OSS underfunding as a strategic sovereignty risk. The £500m Sovereign AI Unit invests venture-style in companies, not maintenance. The Matrix.org Foundation, steward of a UK-origin protocol run as critical national infrastructure abroad, has publicly struggled to fund core development.
Its fill: A DSIT-sponsored, UKRI-administered UK Sovereign Tech Fund (~£12.5m/yr initially) issuing maintenance contracts (not competitive grants) for critical open-source components, guided by a published criticality assessment of UK digital dependencies.
№ 143 · No UK Sovereign Tech Fund for critical open-source maintenance (Funding (lens))
Germany's Sovereign Tech Agency has, since 2022, procured maintenance and security work on open-source components underpinning the state and economy. The UK has no equivalent: UKRI/Software Sustainability Institute's Research Software Maintenance Fund covers research software only; OpenUK-UKRI workshops (2025-26) produce recommendations, not money; NCSC issues guidance without funding. UK Day One has published a costed proposal (£12.5m/yr, UKRI-distributed) but as of mid-2026 funding critical OSS as a public good is absent from UK policy.
Its fill: A DSIT-sponsored Sovereign Tech Fund (£12.5-25m/yr) issuing maintenance contracts, security audits and bug bounties for open-source software the UK public sector and critical infrastructure depend on, housed in UKRI or as an ARIA-adjacent unit, per the UK Day One blueprint.
№ 156 · No UK equivalent of Germany's Sovereign Tech Fund for critical open-source maintenance (Policy (lens))
Germany's Sovereign Tech Fund invested over €23m in ~60 critical open-source projects in 2022-24, and an EU-level fund is being designed. The UK has no equivalent: no fund pays for maintenance and security of the open-source components government services and national infrastructure depend on. OpenUK has a funding blueprint 'under discussion' with the public sector, and the Centre for British Progress published a proposal for a UK open-source fund (December 2025) citing a £15bn+ contribution of OSS to the UK economy. DSIT's Digital Standards Strategy 2026-30, the Open Standards Principles and the Procurement Act 2023 address standards and buying, not maintenance; UKRI competitions fund innovation, not upkeep.
Its fill: A DSIT-sponsored UK Sovereign Tech Fund: an arm's-length body (~£20-30m/year initially) contracting maintainers of open-source components critical to UK public services, using Germany's commissioning model, underpinned by a published criticality assessment of open-source dependencies across government.