How I'd Actually Build Government Software That Doesn't Fall Over

You don't fix a meltdown with experts parachuting in after the breach. You fix it with defaults that make the breach hard to commit: a federated core, HTML-first frontends, and storage you can't make public.