An anonymous federal whistleblower filed a disclosure with Senator Richard Blumenthal’s office warning that the US Postal Service’s new Federal Ballot Mail Portal is ‘untested, fatally flawed and likely to lead to a catastrophic failure’ ahead of November’s midterm elections. The whistleblower, represented by Whistleblower Aid attorney David Kligerman, alleges USPS ‘discarded all best practices’ in rushing a September 1 rollout — and that development continued in direct violation of a Massachusetts judge’s injunction. USPS says it is ‘carefully reviewing’ the claims.
WHAT THE PORTAL IS
The Federal Ballot Mail Portal is the technical implementation of Trump’s March 2026 executive order requiring verification of federal citizen lists before mail ballots can be delivered. The executive order is itself contested: most Democratic-led states are refusing to cooperate, arguing the Constitution grants states — not the federal government — authority to set election rules (Story 9 today covers this in detail). The portal is the federal government’s technical tool for the new verification process.
THE ZERO-PERCENT FAILURE POLICY
The specific technical design flaw at the center of the whistleblower’s disclosure is the ‘zero-percent failure policy’: a design requirement that the portal have zero failures. The specific implementation problem: instead of flagging individual mismatched ballots for review, the system is designed so that a single mismatched ballot can trigger rejection of an entire batch — potentially tens of thousands of ballots — in a single failure event.
The name ‘zero-percent failure policy’ sounds like a quality guarantee. Its functional effect is the opposite: it means any failure — however small — cascades into a maximum-impact outcome for the batch containing the failure. This is a specific, documented software design approach that is appropriate for some systems (nuclear plant controls, aircraft avoidance systems) and catastrophically inappropriate for others (voting systems where errors should be flagged individually, not cascaded).
THE SEPTEMBER 1 ROLLOUT
The whistleblower alleges USPS ‘discarded all best practices’ to meet a September 1 rollout deadline. Software best practices for election systems typically include:
▸ Comprehensive testing across all state voter file formats (50 states plus territories, each with different data standards)
▸ Failure mode analysis — systematic testing of what happens when the system encounters unexpected inputs
▸ Redundancy and fallback mechanisms — what happens when the primary system fails
▸ Independent security audits
▸ Parallel testing with historical ballot data before live deployment
The whistleblower’s allegation that USPS ‘discarded all best practices’ is a specific claim that the September 1 rollout skipped these steps. USPS has not specifically addressed this allegation beyond its general statement that it is ‘carefully reviewing’ the claims.
THE INJUNCTION VIOLATION ALLEGATION
The whistleblower specifically alleges that development of the portal continued in violation of a Massachusetts judge’s injunction ordering a halt. This is the most legally significant specific allegation in the disclosure: violating a federal court injunction is contempt of court, not a regulatory or policy dispute. USPS’s public statement says its work has been ‘consistent with court orders.’ The specific factual dispute between the whistleblower’s sworn account and USPS’s public statement is:
▸ Whistleblower (sworn disclosure): development continued in violation of the Massachusetts court’s injunction
▸ USPS (public statement): work has been ‘consistent with court orders’
▸ Resolution: a court inquiry would determine which account is accurate; the factual dispute cannot be resolved by assertion from either side
BLUMENTHAL’S CHARACTERIZATION
Senator Blumenthal called the implementation ‘sabotage,’ stating ‘the Postal Service has designed a system to disenfranchise millions of Americans.’ ONYX covers Blumenthal’s characterization at its political weight: he is a Democratic senator who has political incentives to characterize the USPS action in the strongest possible terms. His ‘sabotage’ framing is a political accusation; the specific technical allegations in the whistleblower’s disclosure are the evidentiary basis for whether that accusation is accurate.
THE 59-DAY COUNTDOWN
The midterm elections are 59 days away. The Federal Ballot Mail Portal’s September 1 launch means it has been operating for 4 days. If the whistleblower’s characterization of its design is accurate, the specific questions that 59 days creates:
▸ How many batches are processed before November 3, and how many failures occur
▸ Whether the court injunction violation allegation is adjudicated before Election Day
▸ Whether states that have refused to participate in the federal system have adequate independent processes for their residents
▸ Whether any federal court acts on the whistleblower’s disclosure before the election
The system was built to verify citizenship before sending mail ballots. It is designed so a single mismatch can reject tens of thousands of ballots. A whistleblower says it is untested and fatally flawed. USPS says it is compliant with court orders. The midterms are 59 days away. This is the most significant election infrastructure story in the arc.
WHAT HAPPENS NEXT
▸ Senate inquiry — whether Blumenthal’s office escalates the disclosure to a formal Senate hearing
▸ Court action — whether the Massachusetts court or any other federal court addresses the injunction violation allegation
▸ Independent audit — whether any independent technical assessment of the portal’s design is commissioned before November 3
▸ State responses — whether states that haven’t participated in the federal system respond to the whistleblower’s disclosure
▸ November 3 — 59 days away
| CONFIDENCE: HIGH | Anonymous federal whistleblower filing with Blumenthal’s office, Whistleblower Aid attorney David Kligerman representation, ‘untested fatally flawed catastrophic failure,’ September 1 rollout, zero-percent failure policy and batch rejection mechanism, injunction violation allegation, Blumenthal ‘sabotage’ and ‘disenfranchise millions’ statement, USPS ‘carefully reviewing’ and ‘consistent with court orders’ statement are from Whistleblower Aid reporting. Federal Ballot Mail Portal as implementation of Trump’s March executive order and states refusing to cooperate are from CBS News confirmed reporting. |
| ⚖️ BIAS CHECK — WHO IS SAYING WHAT | |
| Federal Whistleblower | Has insider knowledge and is protected by federal whistleblower statutes; their sworn disclosure carries legal weight; they have an interest in the public knowing about what they assess as a serious problem |
| Whistleblower Aid (Kligerman) | Organization that assists federal whistleblowers; advocacy organization with interest in the disclosure being taken seriously; their client characterization represents the whistleblower’s account |
| Sen. Blumenthal | Democratic senator with strong political incentive to characterize USPS implementation in the strongest possible terms; his “sabotage” framing is political characterization; the technical allegations in the disclosure are the factual basis |
| USPS | Has institutional interest in defending the legitimacy of its own implementation; its “consistent with court orders” statement is a direct contradiction of the whistleblower’s injunction violation allegation |
| ONYX | Covering the technical design allegations (zero-percent failure policy, batch rejection) as the specific accountability basis; presenting the Blumenthal characterization at its political weight; presenting the USPS-whistleblower factual dispute as requiring resolution, not assertion from either side |
SOURCES
▸ Whistleblower Aid — federal whistleblower USPS ballot portal disclosure Blumenthal, September 5, 2026
Q: What is the Federal Ballot Mail Portal designed to do?
A: The Federal Ballot Mail Portal implements Trump’s March 2026 executive order requiring verification of federal citizen lists before mail ballots can be delivered. The specific verification step: before a mail ballot is sent to a registered voter, the portal verifies the voter against federal citizenship records. The policy premise is that this reduces noncitizen voting. Critics argue noncitizen voting is documented as extremely rare and the verification requirement creates barriers that disenfranchise eligible citizens whose names or addresses in federal records do not match their voter registration.
Q: What is a “zero-percent failure policy” in software design?
A: In most software, individual errors are logged, flagged for review, and handled individually without affecting the rest of the system’s operations. A “zero-percent failure policy” sets a system standard where any failure produces a halt or rejection of the entire batch being processed. This design approach is appropriate where any failure has catastrophic consequences regardless of scale (a nuclear reactor shutdown is better than a partial meltdown). For a ballot verification system, the appropriate design is the opposite: flag individual mismatches for human review without affecting the rest of the batch. The whistleblower’s allegation is that the portal uses the wrong design approach for its function.
Q: Can the portal be fixed before November 3?
A: 59 days is a short timeline to redesign, test, and redeploy a federal election system component. Software systems can be patched and updated; whether the specific architectural flaw the whistleblower describes is a patch-level fix or a fundamental redesign requirement would determine the feasibility of a pre-election correction. The court injunction issue is separate: if USPS continued development in violation of an injunction, the court’s role in addressing that compliance failure is independent of whether the technical system can be fixed.
