Technology Union and State (Concurrent)Cost approach stated

Public money, public code, where security permits

The problem

Government software is often built repeatedly at public expense and cannot be reused between States.

The same portal is paid for many times over, and its failures cannot be independently examined.

Advocate open source by default for citizen-facing government software, with clearly stated security exceptions.

We publish our own platform source as the demonstration, including its security documentation.

Risk

Open code exposes vulnerabilities to attackers as well as to reviewers.

Mitigation

Never publish secrets or configuration. Maintain a responsible disclosure process. Security through design, not obscurity.