PRIORITY FRAMEWORK
Four Tiers — Triage by Impact
TIER 1 · STOP THE BLEEDING · NOW · $0 COST
Fixes that require no new legislation, no new funding, just enforcement of existing law. These can be done today by executive action, existing agency authority, or court order.
FIX-001, 002, 007, 009, 018, 019, 020, 023, 025, 034, 037, 038
TIER 2 · FUNDED PROGRAMS · 6-18 MONTHS · $50M-$500M
Fixes requiring appropriations but not new law. Grant programs, CISA expansions, EAC modernization. Can be attached to existing appropriations bills.
FIX-005, 008, 012, 016, 024, 026, 028, 031, 035, 039, 040, 041, 042, 044
TIER 3 · LEGISLATIVE · 1-3 YEARS · $1B-$4B
Fixes that require new federal legislation. Constitutional guardrails, mandatory audit standards, independent oversight bodies. Must survive Senate filibuster (60 votes).
FIX-003, 004, 006, 010, 013, 017, 021, 022, 027, 029, 033, 036, 043
TIER 4 · STRUCTURAL REFORM · 3-10 YEARS · $3B-$8B
Fixes that require fundamental restructuring of how elections are administered in the US. Independent commissions, national standards, infrastructure modernization.
FIX-011, 014, 015, 030, 032
TIER 1 · STOP THE BLEEDING
Enforce Existing Law. Today. $0.
FIX-001← GAP-001Replace Poison Postcards with Certified Mail + Digital Confirmation
SUPPRESSIONLOW
NVRA already requires "reasonable effort" to contact voters before purge. Junk-mail postcards with 1-10% return rate are not reasonable effort. FIX: Require certified mail with return receipt AND email/text confirmation where available. If neither returned AND voter missed 2 consecutive federal elections, then purge. Existing NVRA authority — no new law needed. Just DOJ guidance enforcing "reasonable."
COST: ~$2/voter for certified mail × 4.78M = $9.6M | VERSUS: 4.78M voters purged
WHO: DOJ Civil Rights Division guidance + state SOS compliance
FIX-002← GAP-002Cap Individual Voter Challenges + Require Evidence
SUPPRESSIONLOW
One person challenged 900 voters in Savannah. No evidence required. FIX: States already have authority to set challenge rules. Cap individual challenges at 10 per person per election cycle. Require sworn affidavit with specific, personal knowledge of ineligibility — not database matching. False challenge = perjury. 37 states already have false challenge penalties — enforce them.
COST: $0 — administrative rule change | VERSUS: 317,886 challenged in 2024
WHO: State election boards + county election officials
FIX-007← GAP-007Enforce the 90-Day Quiet Period — Contempt for Violations
SUPPRESSIONSYSTEM MANIPULATIONLOW
NVRA already prohibits systematic purges within 90 days of election. Virginia violated it. Supreme Court allowed it on emergency appeal. FIX: DOJ files criminal contempt — not civil settlements — for 90-day violations. Any voter purged within 90 days automatically restored + provisional ballot counted as regular. Existing law. Just enforce it.
COST: $0 — DOJ litigation budget | VERSUS: 1,600 voters purged in Virginia alone
WHO: DOJ Voting Section + Federal courts
FIX-009← GAP-009Require Data Minimization in DOJ Voter Roll Requests
DATA THEFTPRIVACY VIOLATIONLOW
DOJ demanding full SSNs, DOBs, addresses — far beyond what NVRA requires for list maintenance oversight. FIX: Courts can and should require data minimization. Anonymized aggregate data for compliance review. Named data only upon specific probable cause. Michigan already refused — court should affirm. Existing 4th Amendment principles apply.
COST: $0 — judicial standard | VERSUS: 24 states' voter PII exposed
WHO: Federal courts hearing DOJ suits + state AGs
FIX-018← GAP-018Firewall DOJ Voting Rights from DOJ Data Collection
CONFLICT OF INTERESTLOW
Same DOJ division enforces ADA at polls AND demands voter data. FIX: Internal DOJ ethical wall — Civil Rights Division cannot share voter data with any other DOJ component. Inspector General oversight. Already standard practice in DOJ for grand jury data, wiretap data, classified material. Just apply existing separation doctrine to voter data.
COST: $0 — AG memorandum | VERSUS: Structural conflict of interest
WHO: Attorney General directive + OIG oversight
FIX-019← GAP-019Prohibit ICE Access to Voter Verification Data
CONFLICT OF INTERESTSUPPRESSIONLOW
DHS verifies voter citizenship AND runs deportation. FIX: Executive order or DHS Secretary directive: SAVE verification data used for voter rolls cannot be shared with ICE, CBP, or any enforcement component. Same principle as census confidentiality (Title 13). Census data is legally firewalled from enforcement — voter data should be too.
COST: $0 — executive directive | VERSUS: Chilling effect on 23M naturalized citizens
WHO: DHS Secretary or Executive Order
FIX-020← GAP-020Recuse Partisan SOS from Purge Decisions in Own Elections
CONFLICT OF INTERESTLOW
Partisan elected officials control who gets purged from the rolls that determine their own elections. FIX: When SOS is on the ballot, delegate purge authority to bipartisan election board or deputy. Already standard practice for judges (recusal). Georgia's SOS purged 875,000 voters in year he was running the election. Recusal = basic ethics.
COST: $0 — administrative recusal | VERSUS: 875,000 purged in Georgia
WHO: State legislatures + election boards
FIX-023← GAP-023Fix Polling Places Instead of Closing Them
ADA WEAPONIZATIONLOW
Jurisdictions close polling places citing ADA non-compliance instead of fixing them. FIX: DOJ existing authority: ADA requires reasonable modification, not closure. Issue guidance: "ADA non-compliance requires remediation, not elimination." NDRN already said it: "We don't make polling places accessible by closing them. We make them accessible by making them accessible."
COST: $0 — DOJ guidance letter | VERSUS: 7 of 9 polling places nearly closed in Randolph Co GA
WHO: DOJ Civil Rights Division
FIX-025← GAP-025Curbside Voting Must Include Secret Ballot
ADA WEAPONIZATIONPRIVACY VIOLATIONLOW
Curbside voting = visible to everyone = no secret ballot. FIX: Require portable privacy screens for all curbside voting. Require accessible ballot-marking device brought to voter — not paper-only. HAVA already requires accessible voting system at every polling place. Extend to curbside. $50 per portable screen × 132,000 polling places = $6.6M.
COST: $6.6M | VERSUS: Secret ballot right for 40.2M disabled voters
WHO: EAC guidance + state election boards
FIX-034← GAP-034EAC Quarterly Compliance Scorecards — Public
CHAIN OF CUSTODYCONFLICT OF INTERESTLOW
No independent oversight body grades the system. FIX: EAC already has authority to study election accessibility. Publish quarterly state-by-state scorecards: polling place accessibility %, website WCAG compliance %, purge rates, provisional rejection rates. Public dashboards. Sunshine = accountability. No new law — just EAC doing its existing job.
COST: ~$2M/year for EAC staff + dashboard | VERSUS: Zero transparency
WHO: EAC (existing authority under HAVA)
FIX-037← GAP-037Separate SAVE Database from Political Appointees
CONFLICT OF INTERESTLOW
DHS Secretary facing bipartisan no-confidence would control voter verification. FIX: SAVE database administration under career civil servants with Inspector General oversight, not political appointees. Same model as Census Bureau (career director, not political). Database operations don't change with administrations.
COST: $0 — administrative restructuring | VERSUS: Political control of voter database
WHO: DHS IG + Congressional oversight committees
FIX-038← GAP-038Prohibit Federal LE from State Election Infrastructure Without Court Order
SYSTEM MANIPULATIONCONFLICT OF INTERESTLOW
FBI raided Georgia election center. Federal agents inside state election infrastructure. FIX: Require judicial warrant — not executive direction — for any federal law enforcement access to state election systems. Same standard as wiretaps. Election infrastructure is critical infrastructure (CISA designation). Treat it like it.
COST: $0 — judicial standard | VERSUS: Federal interference in state elections
WHO: Federal courts + Congressional clarification of CISA designation
TIER 2 · FUNDED PROGRAMS
Appropriate Money. Deploy Programs. 6-18 Months.
FIX-005← GAP-005National Polling Place Accessibility Remediation Fund
SUPPRESSIONADA WEAPONIZATIONMEDIUM
73% non-compliant = ~96,000 polling places need fixes. Most fixes are cheap: portable ramps ($200), signage ($50), accessible parking markings ($100). FIX: Federal grant program: $2,000/polling place for ADA remediation kit. States apply, EAC distributes, county implements. 96,000 × $2,000 = $192M. Less than one F-35 fighter jet.
COST: $192M | VERSUS: $14.4B in potential ADA fines
WHO: EAC grants + state election offices
FIX-008← GAP-008Independent Accuracy Testing of SAVE Database Matching
SUPPRESSIONSYSTEM MANIPULATIONMEDIUM
SAVE database matching has unknown false positive rate. MEGA Act would multiply checks 12x. FIX: Before mandating monthly checks, commission independent accuracy study. Test SAVE against known citizen rolls. Publish false positive rate. If rate exceeds 0.1%, matching cannot be used for automatic purges — manual review required. Fund through CISA.
COST: $5M study + $20M/year for manual review | VERSUS: Millions wrongly flagged
WHO: CISA + EAC + independent researchers (Rutgers model)
FIX-012← GAP-012Mandatory CISA Security Standards for Election Websites
DATA THEFTSYSTEM MANIPULATIONMEDIUM
No mandatory cybersecurity standard. Some sites use Cloudflare; many don't. DDoS up 400%. FIX: CISA already offers free DDoS protection (Project Shield). Make it mandatory for all election websites. Require annual penetration testing. Publish results (pass/fail, not vulnerabilities). Fund through existing CISA election security grants.
COST: $50M/year (CISA expansion) | VERSUS: 500K records stolen (Illinois 2016)
WHO: CISA + state election offices
FIX-016← GAP-016Mandatory Risk-Limiting Audits in All Federal Elections
SYSTEM MANIPULATIONCHAIN OF CUSTODYMEDIUM
No national audit standard. Some states do nothing. FIX: Require risk-limiting audits (RLAs) for all federal contests. Colorado already does this — proven, scalable, cheap. Confirm paper trail matches machine count. Verified Voting provides free guidance. $10/precinct to audit. 175,000 precincts × $10 = $1.75M per election.
COST: $1.75M/election | VERSUS: Undetected machine errors or manipulation
WHO: EAC mandate + state adoption (Colorado model)
FIX-024← GAP-024Alternative Accessible Polling Place for Every Church Site
ADA WEAPONIZATIONMEDIUM
~12,000 polling places in ADA-exempt churches. FIX: For every church polling place, designate accessible alternative within 1 mile. Or require church to sign ADA compliance agreement as condition of use. HAVA already requires accessible voting system — extend to require accessible venue. $500/site for temporary ramp/signage at church OR $2,000/site for alternate venue rental.
COST: $6M-$24M | VERSUS: 12,000 inaccessible polling places
WHO: County election boards + EAC grants
FIX-026← GAP-026Mandatory Disability Impact Assessment for All Election Bills
ADA WEAPONIZATIONMEDIUM
No disability impact assessment for SAVE Act or MEGA Act. FIX: Congressional rule change: all election legislation requires Disability Impact Statement (modeled on Environmental Impact Statement). GAO or CBO scores disability impact. Requires testimony from disability organizations. Applies to state legislatures too (ADA Title II mandate).
COST: $3M/year for GAO scoring | VERSUS: 40.2M disabled voters affected by un-assessed laws
WHO: House/Senate Rules Committee + GAO
FIX-028← GAP-028AI Election Disinformation Rapid Response Unit
DISINFORMATIONMEDIUM
Deepfakes, fabricated lawsuits, SEO poisoning increasing exponentially. FIX: CISA already runs rumor control. Expand to AI-specific detection. Fund rapid response team to identify and flag AI-generated election disinfo within 4 hours. Partner with platforms for expedited takedown. Publish AI deepfake detection tools for election officials.
COST: $25M/year | VERSUS: 40% increase in AI-assisted false filings
WHO: CISA + FBI + FEC
FIX-031← GAP-031Ban Vendor Remote Access + Mandatory Disclosure
CHAIN OF CUSTODYMEDIUM
Vendor admitted 6 years of undisclosed remote access. FIX: EAC certification requires: no remote access capability. All vendor access must be on-site, logged, and witnessed by bipartisan team. Mandatory disclosure of any remote capability within 30 days — violation = decertification + $10M fine. CISA already tests; just enforce results.
COST: $10M/year for expanded testing | VERSUS: Undisclosed vendor access to counting hardware
WHO: EAC certification + CISA + state election directors
FIX-035← GAP-035Emergency WCAG 2.1 Grant for Election Websites Before April 2026
ADA WEAPONIZATIONMEDIUM
April 24, 2026 deadline — 72 days away. Most election websites not compliant. FIX: Emergency EAC grant: $10,000/county for WCAG remediation. 3,143 counties × $10,000 = $31.4M. Provide pre-built accessible templates. Counties adopt template, customize content. 80% of issues fixable in 30 days with templates.
COST: $31.4M | VERSUS: 5,500+ ADA lawsuits expected in 2026
WHO: EAC + DOJ + Great Lakes ADA Center (already providing training)
FIX-039← GAP-039AI Challenge Detection + Automatic Stay on Mass Filings
SUPPRESSIONSYSTEM MANIPULATIONMEDIUM
AI enables mass voter challenges at scale. FIX: When any individual or organization files >50 challenges in one cycle, automatic judicial review before processing. Courts already detect AI-generated briefs (fabricated citations). Apply same detection to voter challenges. Pattern: identical formatting + database-only knowledge = AI-generated = stay pending review.
COST: $5M for detection tools | VERSUS: 2M+ projected AI challenges
WHO: State courts + election boards
FIX-040← GAP-040Build the Citizenship Database Before Requiring It
SYSTEM MANIPULATIONMEDIUM
SAVE Act requires citizenship verification against a system that doesn't comprehensively exist. FIX: Before mandating verification, build the infrastructure. Cross-reference SSA birth records + State Dept passport data + USCIS naturalization records into unified, accuracy-tested database. Publish error rate. Don't legislate requirements against systems that don't work yet.
COST: $200M to build + $50M/year to maintain | VERSUS: Unknown false positive rate on 170M+ citizens
WHO: SSA + State Dept + USCIS + CISA
FIX-041← GAP-041Election Worker Protection + Recruitment Fund
SUPPRESSIONCHAIN OF CUSTODYMEDIUM
Workers terrorized, criminalized (5-year prison under SAVE Act), leaving. FIX: Federal election worker protection: threats against election workers = federal felony (already passed in some states). Recruitment incentive: $500/worker/election day. Legal defense fund for workers facing frivolous prosecution. EAC training expansion for ADA + accessibility.
COST: $100M/election cycle | VERSUS: Understaffed polls = longer lines = suppression
WHO: DOJ + EAC + state election boards
FIX-042← GAP-042Transparent Provisional Ballot Tracking
SUPPRESSIONMEDIUM
1.2M provisionals rejected — no transparent tracking. FIX: Require tracking number on every provisional ballot. Online status check (same as USPS package tracking). Mandatory reason code for rejection. Publish aggregate rejection rates by county. If rejection rate exceeds 20%, automatic DOJ review. Ballot tracking exists for mail — extend to provisional.
COST: $15M for tracking system | VERSUS: 1.2M votes in a black hole
WHO: EAC standard + state implementation
FIX-044← GAP-044Commission the First Comprehensive Multi-Vector Audit
SUPPRESSIONDATA THEFTSYSTEM MANIPULATIONCHAIN OF CUSTODYMEDIUM
The US voter system has never been comprehensively audited. FD-067 is the first. FIX: GAO full-spectrum audit: ADA + HAVA + NVRA + cybersecurity + data privacy + chain of custody + accessibility — all 50 states + DC + territories. GAO did polling place audits in 2000 and 2008. They haven't done one in 18 years. Commission it. Publish it. Act on it.
COST: $25M for comprehensive GAO audit | VERSUS: 34 years of unaudited non-compliance
WHO: Congressional request to GAO + EAC + CISA coordination
TIER 3 · LEGISLATIVE
New Laws Required. 1-3 Years.
FIX-003← GAP-003Ballot Cure Period — Federal Standard
SUPPRESSIONLEGISLATIVE
2.1M mail ballots rejected for minor errors. FIX: Federal law: 7-day cure period for all mail ballot defects (signature mismatch, missing info, postage). Voter notified by text/email/mail. Same standard that exists for tax returns (IRS gives you time to fix errors). 2.1M votes saved per cycle.
COST: $30M/cycle for notification systems | VERSUS: 2.1M rejected ballots
WHO: Congress (new legislation)
FIX-004← GAP-004Same-Day Registration + Accessible Online Registration — Federal
SUPPRESSIONLEGISLATIVE
3.24M registrations rejected. Only 23 states + DC offer same-day. FIX: Federal mandate: same-day registration for all federal elections (already proven in 23 states). Accessible online registration meeting WCAG 2.1 AA for all states. No in-person-only requirements without accessible alternative. Defeats SAVE Act's in-person barrier.
COST: $100M for online system modernization | VERSUS: 3.24M rejected registrations
WHO: Congress (new legislation)
FIX-006← GAP-006Protected Accessible Voting Pathways — Can't Be Legislated Away
SUPPRESSIONADA WEAPONIZATIONLEGISLATIVE
MEGA Act bans mail voting, ballot collection. FIX: Federal law: any election requirement must include accessible alternative. In-person citizenship proof required? Must also accept online/mail with electronic verification. Mail ballot banned? Must provide accessible in-person with guaranteed <30 min wait + ADA compliance. Every barrier gets an on-ramp. ADA Section 35.130 principle: can't eliminate only accessible pathway.
COST: Variable by implementation | VERSUS: 40.2M disabled voters lose primary voting method
WHO: Congress (new legislation or amendment to MEGA/SAVE)
FIX-010← GAP-010Voter Data Protection Act
DATA THEFTPRIVACY VIOLATIONLEGISLATIVE
SAVE Act sends all voter data to DHS with zero restrictions. FIX: Federal Voter Data Protection Act: data minimization (only what's needed for verification), purpose limitation (verification only, not enforcement), retention limits (delete after verification), breach notification, annual audit of access logs. Model on GDPR principles already used by US companies for European data.
COST: $20M/year for compliance | VERSUS: Every voter's SSN in unrestricted federal database
WHO: Congress (new legislation)
FIX-013← GAP-013Domestic-Only Election Infrastructure Mandate
DATA THEFTCHAIN OF CUSTODYLEGISLATIVE
NH voter system outsourced to firm that offshored to Russia. FIX: Federal law: all election infrastructure (software, hosting, development) must be US-based with US persons. Same standard as defense contracting (ITAR). Audit trail for all code. No offshore development of any election-related system. Violation = federal felony.
COST: $50M/year for domestic sourcing premium | VERSUS: Russian servers on voter data
WHO: Congress + CISA enforcement
FIX-017← GAP-017Mandatory Ballot Anonymization Testing
SYSTEM MANIPULATIONPRIVACY VIOLATIONLEGISLATIVE
Halderman proved ballots can be de-anonymized. Dominion patched it. Georgia didn't apply patch. FIX: Federal law: all voting systems must pass anonymization testing by independent lab before certification. Any system with known de-anonymization vulnerability must be patched within 90 days or decertified. Secret ballot is constitutional — enforce it technically.
COST: $15M/year for testing | VERSUS: Secret ballot technically broken
WHO: Congress + EAC certification
FIX-021← GAP-021Prohibit Intelligence Agencies from Election Investigation Without Congressional Oversight
CONFLICT OF INTERESTLEGISLATIVE
CIA/spy agencies directed to investigate elections for president's lawyer. FIX: Federal law: intelligence agencies cannot investigate domestic elections without bipartisan Congressional notification (Gang of Eight). Same standard as covert operations. Election investigation = domestic, not foreign intelligence. Requires warrant, not executive direction.
COST: $0 — legal guardrail | VERSUS: Intelligence apparatus weaponized for elections
WHO: Congress (Intelligence Committee reform)
FIX-022← GAP-022DHS Contract Transparency for Officials with Voter Data Authority
CONFLICT OF INTERESTLEGISLATIVE
$200M in DHS contracts to Noem-connected firm. Undisclosed dark money. FIX: Any official with authority over voter data must disclose all financial interests in entities contracting with the agency. Real-time disclosure (not annual filings). Failure to disclose = automatic recusal from voter-related decisions. IG investigation mandatory.
COST: $0 — disclosure requirement | VERSUS: $200M in undisclosed conflicts
WHO: Congress (ethics reform)
FIX-027← GAP-027Proportionality Requirement for Election Integrity Measures
DISINFORMATIONSUPPRESSIONLEGISLATIVE
8,000 legitimate voters purged per 1 noncitizen found. FIX: Federal law: any election integrity measure must demonstrate its false positive rate (legitimate voters affected) doesn't exceed 10x its true positive rate (actual violations caught). If a measure purges 8,000 citizens to find 1 noncitizen, it fails proportionality. Same principle as 4th Amendment (probable cause must be specific).
COST: $0 — legal standard | VERSUS: 4.78M wrongly purged
WHO: Congress (new legislation) + Federal courts
FIX-029← GAP-029Official State Deadwood Reporting — Kill the Conspiracy
DISINFORMATIONMEDIUM
"More registrations than population" claims fuel conspiracies. FIX: Require every state to publish real-time dashboard: total registrations, total eligible population, total "deadwood" (moved/deceased pending removal), removal rate. Explain NVRA multi-cycle requirement publicly. Transparency kills conspiracy. 19M records already removed 2020-2022 — just show people the system works.
COST: $5M for dashboard infrastructure | VERSUS: Elon Musk reaching 200M+ followers with false claims
WHO: EAC + state SOS offices
FIX-033← GAP-033Election Law Sunset Provision — Can't Write Laws You Won't Face
CHAIN OF CUSTODYCONFLICT OF INTERESTLEGISLATIVE
60 members retiring = writing laws they'll never be subject to. FIX: All election legislation includes 4-year sunset. Must be re-authorized by officials who will face voters under the rules they're passing. Prevents lame-duck election manipulation. Same model as FISA reauthorization — temporary authority requires renewal.
COST: $0 — legislative design | VERSUS: Permanent laws by transient officials
WHO: Congress (rules committee)
FIX-036← GAP-036Separate Voter Verification from DHS Shutdown Politics
SYSTEM MANIPULATIONLEGISLATIVE
DHS shutdown = SAVE database goes dark, but ICE keeps running. FIX: SAVE database designated essential service — operates regardless of DHS funding status. Same as air traffic control, Social Security payments, military operations. If voter verification is "critical election infrastructure," fund it like critical infrastructure.
COST: $0 — designation change | VERSUS: Voter verification offline during shutdown
WHO: Congress (appropriations)
FIX-043← GAP-043Name Change Grace Period for Registration
SUPPRESSIONLEGISLATIVE
SAVE Act: birth certificate must match registration. Married women's names won't match. FIX: Federal standard: voters with name changes (marriage, divorce, adoption, transition) get 2-year grace period to update documents. Marriage certificate accepted as bridge documentation. Applies to all SAVE/MEGA citizenship verification. 34M marriages per decade = 34M potential mismatches prevented.
COST: $10M for updated matching logic | VERSUS: 34M potential false mismatches per decade
WHO: Congress (amendment to SAVE/MEGA)
TIER 4 · STRUCTURAL REFORM
Rebuild the Foundation. 3-10 Years.
FIX-011← GAP-011National Voter Data Encryption Standard
DATA THEFTPRIVACY VIOLATIONHIGH
198M records exposed unencrypted. FIX: All voter registration data encrypted at rest and in transit. Federal standard: AES-256 minimum. No plaintext voter PII in any database. Key management under EAC, not partisan officials. Same encryption standard required for healthcare (HIPAA) and financial (PCI-DSS) data. Voter data is equally sensitive. Treat it equally.
COST: $500M for nationwide encryption upgrade | VERSUS: 198M records already leaked
WHO: Congress + CISA + EAC + all 50 states
FIX-014← GAP-014National Voting Machine Modernization — Paper Trail + Open Source
SYSTEM MANIPULATIONHIGH
Known vulnerabilities in machines used by millions. Vendor lock-in. Proprietary code. FIX: Transition to open-source voting software with mandatory paper trail. LA County's VSAP is a model (county-owned, open-source). End vendor monopoly (Dominion, ES&S, Hart control 92% of market). Open source = auditable by anyone. Paper trail = verifiable by humans.
COST: $2B over 10 years | VERSUS: 3-vendor monopoly with proprietary, unauditable code
WHO: Congress + EAC + CISA + county governments
FIX-015← GAP-015Insider Threat Program for Election Officials
CHAIN OF CUSTODYHIGH
Tina Peters. Coffee County. 8 breach attempts across 5 states. FIX: Federal insider threat program for all officials with voting system access. Background checks, dual-person access (like nuclear codes), audit logging, mandatory reporting. Same model as classified information handling. Election systems are critical infrastructure — apply critical infrastructure security protocols.
COST: $100M/year | VERSUS: Rogue officials copying voting systems
WHO: CISA + state election directors + FBI
FIX-030← GAP-030Replace DEFCON Theater with Structured Vulnerability Disclosure
DISINFORMATIONSYSTEM MANIPULATIONHIGH
DEFCON finds vulnerabilities in hotel ballroom, media spreads fear, conspiracists cite it, nothing gets fixed. FIX: Election Security Research Forum model (structured, collaborative, responsible disclosure). Findings go to vendors + CISA + EAC with 90-day fix window before public disclosure. Same model as Google Project Zero. Replace theatrical hacking with actual security improvement.
COST: $10M/year for structured program | VERSUS: Annual conspiracy fuel cycle
WHO: CISA + EAC + Election Security Research Forum
FIX-032← GAP-032Independent Election Administration Commission
CHAIN OF CUSTODYCONFLICT OF INTERESTHIGH
No independent oversight. DOJ conflicted. EAC underfunded. Partisan SOS run purges. FIX: Independent Election Administration Commission modeled on Federal Reserve: bipartisan, confirmed by Senate, staggered terms, independent budget, enforcement authority. Combines EAC's research + DOJ's enforcement + CISA's security without any single agency's conflicts. The system needs an auditor who isn't also a player.
COST: $200M/year | VERSUS: Structural conflict of interest in every oversight body
WHO: Congress (new legislation — constitutional authority exists under Elections Clause)
Every gap has a fix. Every fix is cheaper than not fixing it.
12 fixes cost $0 — they're administrative actions enforcing existing law. 7 of them could be done this week by AG memorandum, EAC guidance, or judicial standard. Nobody has to pass a bill. Nobody has to appropriate a dollar. Just enforce what's already law.
14 fixes need funded programs — total ~$700M. The polling place remediation fund alone ($192M) would fix 96,000 non-compliant sites for less than the cost of one F-35. The April 2026 WCAG fix ($31.4M) would prevent 5,500+ lawsuits. Every dollar spent prevents $20 in liability.
13 fixes need new legislation — but most are amendments to bills already in committee. Add a disability impact assessment to SAVE Act: $3M. Add name-change grace period to MEGA Act: $10M. Add proportionality requirement: $0. These aren't new laws — they're guardrails on laws already being written.
5 fixes need structural reform — total ~$7B over 10 years. Sounds like a lot. But $14.4B in ADA fines is worse. 198M exposed records is worse. 4.78M wrongly purged voters is worse. A democracy where 15.3 million disabled citizens can't vote is worse.
Total remediation: ~$8.2B. Total liability if not fixed: $14.4B+ in ADA fines alone, plus litigation costs, plus settlement costs, plus reputational damage to American democracy. Fix costs 57 cents per dollar of liability. This is not a hard ROI calculation.
EVERY GAP HAS A FIX. EVERY FIX IS TAGGED. EVERY FIX IS COSTED. NOW DO IT.