SHAX – The Open Source Concept for Government Administrations

SHAX – The Open Source Concept for Government Administrations Modern government IT (GovTech) strategies frequently suffer from a widening gap between the political rhetoric of "Digital Sovereignty" and the operational reality of systemic vendor lock-in. Despite extensive institutional mandates favoring open-source ecosystems, public administrations remain heavily dependent on foreign proprietary hyperscalers and brittle legacy frameworks. This paper presents a critical analysis of current national IT infrastructures and introduces SHAX, a minimalist, deterministic architectural framework designed to systematically eliminate these structural vulnerabilities.The SHAX model rejects the dominant industry dogma of browser-based enterprise applications ("Fat Browsers") due to their un-auditable attack surfaces and inherent susceptibility to endpoint exploits. Instead, it proposes a secure, hybrid alternative: - Unikernel Gateways: Transitioning core data highway endpoints (such as X-Road security nodes) into highly optimized, single-purpose bootable images compiled via Unikraft, entirely stripped of shells, package managers, and remote access protocols (SSH).- Stateless Native Micro-UIs: Replacing vulnerable web runtimes with resource-efficient, compiled native desktop environments (C++/Qt or Rust/Slint) that interact with backend infrastructure exclusively through strongly-typed, binary gRPC protocols.- The Document Diet: Migrating unstructured administrative paperwork away from macro-vulnerable binary files to a plaintext Markdown ecosystem, utilizing server-side rendering engines (Pandoc/WeasyPrint) to generate immutable PDF/A-3a records.- Immutable Workspace Environments: Securing public endpoints through read-only operating systems—leveraging kernel-level validation (dm-verity) and hardware-token authentication — modeled on evolved local deployments like the Finnish Puavo ecosystem. Furthermore, this paper demonstrates how the SHAX framework replaces foreign cloud monopolies with a predictable, decentralized economic model. By shifting infrastructure requirements to component-driven development and managed local OS subscriptions, public funding is redirected into regional B2B IT service ecosystems. Ultimately, the paper provides a scalable technical blueprint for both centralized (France) and federated (Germany) European governance models, proving that true administrative resilience is achieved not through bureaucratic auditing, but through radical technological minimalism.