Comelec Opened the Source Code Room. The Transmission Servers Stayed Locked.
Civil society observers get a seat at the 2028 source code review. The vendor contract still keeps independent auditors away from the servers that move the votes.
Comelec announced this month that the 2028 source code review will be opened to accredited civil society observers, a concession watchdogs have asked for since 2010. The same week, the signed vendor contract for the automated election system surfaced with a clause that bars independent audit of the transmission servers. Both things are true, and reading them together is the only honest way to read them.
The source code review matters, and it has always been the easier ask. Reviewers sit in a controlled room, read what the machines are supposed to do, and certify the logic. It is a useful check, but it is a check on the recipe, not the kitchen.
Where the votes actually move
Transmission servers are where precinct results travel before they reach the canvassing screens the public sees on election night. If something is going to be quietly reshaped, that is the corridor it would move through, which is why auditors have spent three election cycles asking to inspect the logs, the network configuration, and the chain of custody.
The current contract language, as flagged by election reform groups, treats that infrastructure as proprietary. The vendor's intellectual property and security posture are cited as reasons no outside party may probe the servers in operation. Comelec retains the right to audit, but Comelec auditing a vendor it is paying is not the same as a third party doing the same job.
The opening that isn't quite an opening
Observer access to the source code is real, and the groups that have pushed for it deserve the win. The framing around it is doing more work than it should, though. Press releases describing the 2028 system as transparent are leaning on the room people can now enter while saying nothing about the room they cannot.
This is the pattern across procurement-heavy elections: the visible part gets opened, the contractual part stays sealed, and the public is invited to treat the first as proof the second is fine. It is also a pattern that survives administrations, because the vendor is a constant and the commissioners rotate.
What civil society can actually push for
The realistic asks are narrow and worth naming. Disclosure of the full transmission server specification before the bidding closes. A clause permitting accredited third-party auditors to observe transmission in real time, with logs preserved for post-election review. A public schedule of which precincts transmit through which server, so discrepancies can be traced rather than denied.
None of this requires breaking the vendor's intellectual property. It requires the vendor to agree, in writing, that election infrastructure paid for by Filipino taxpayers can be watched while it runs.
The 2028 ballot is two years out, and the contract is already signed. Observers will walk into the source code room with credentials and clipboards, and they will leave with a report saying the code does what the code is supposed to do. The servers that carry the actual numbers will keep running behind a clause that says no one outside the vendor and the commission gets to look. That is the receipt voters should be asking about now, while there is still time to renegotiate it.
