Tutorials

Lost Source Code, Live Platform: How to Modernise a Public Sector Application When You Cannot Just Refactor

Public sector platforms often outlive the contracts that built them, and the source code outlives nothing. The discipline of reconstructing business logic and rescuing the data is a craft of its own.

P

Written by

PANEOTECH Team

Published

November 10, 2025

Read time

9 min read

The public sector legacy problem nobody discusses

A surprisingly common starting point on public sector digital projects is this. There is a live application. It is in production. Citizens or institutional users depend on it. And the source code is not available. The original development contract ended years ago, the original developer has moved on, the version control history is missing, and the only thing left is the deployed binary and whatever data still lives in the production database.

The temptation is to wait until the situation is "cleaner" before doing anything. The reality is that public sector platforms in this state are a permanent risk. Every hour they remain in production without recoverable source is an hour closer to the failure that takes them offline with no recovery path. Modernisation cannot wait for ideal conditions, because ideal conditions are not coming.

The discipline of reconstruction

Modernising a platform without source code is a craft of its own. The work has three concurrent streams.

The first is reconstructing the business logic. This is not reverse engineering in the academic sense. It is structured interview work with the institutional users, document analysis of the operational procedures the platform implements, and careful observation of the live system to map every workflow, validation rule, and decision gate. The output is a functional specification of what the platform actually does, which the institution may never have had in writing.

The second is rescuing the data. Production databases of legacy public sector platforms are typically a mix of intentional schema and historical accident. Tables that started as one thing have become another. Columns are reused for purposes nobody documented. Reference data drifts. The work is to extract the data, normalise it against the reconstructed business logic, clean what can be cleaned, and present the rest with explicit caveats so the institution can make informed decisions about retention.

The third is integrating heterogeneous content. Public sector platforms accumulate content in whatever formats were available when the content was created. PDFs, Word documents, scanned images, audio files in inconsistent formats. The work is to extract the content, normalise it against a coherent data model, and integrate it into the new platform so the institutional knowledge is preserved rather than lost in the transition.

What we did for ICAT and FAO Togo

PANEOTECH faced exactly this situation on the e-Agriconseil+ platform, redeveloped for the Institut de Conseil et d'Appui Technique under the Pro-SADI programme commissioned by FAO Togo. The previous version was technologically obsolete and the source code was not recoverable. The mandate was to rebuild the platform from scratch while preserving the operational knowledge embedded in the existing system.

The reconstruction phase mapped the existing advisory workflows through structured interviews with ICAT institutional staff. The data engineering phase extracted, normalised, and integrated more than 300 technical sheets and over one gigabyte of source material from heterogeneous formats including PDFs, Word documents, and unstandardised audio files. The result is a coherent, structured knowledge base that the new platform serves through a content management system ICAT administrators now operate independently.

The institutional lesson

Lost source code is not the worst thing that can happen to a public sector platform. The worst thing is treating it as a reason to do nothing. Reconstruction is hard, slow, and unglamorous, but it is the work that turns an inherited liability into an institutional asset the institution actually owns.

About the author

PANEOTECH Team

Pan-African Digital Systems Engineering

PANEOTECH designs and delivers secure, scalable, and sustainable digital ecosystems for governments, multilateral institutions, and the private sector across Africa. Field notes, case studies, and analyses from our engagements appear in this publication.

Continue reading

More from PANEOTECH

Tutorials

Offline-First, Multilingual Mobile Architecture: Engineering Knowledge Platforms for Sahel Connectivity

A mobile knowledge platform for the Sahel that assumes continuous connectivity and a single language is a platform the audience cannot use. Offline-first multilingual architecture is not a feature. It is the structural premise that decides whether the platform reaches the users whose decisions it exists to inform.

Tutorials

BPM-Driven No-Code Workflows for Quality Teams: Configurable Forms, Routing, and Audit Trails Without a Developer

A quality management platform whose workflows can only be modified by the vendor that built it has limited the institution's quality discipline to whatever the contract scoped. The configurable BPM engine resolves the limitation, and the discipline that makes it work is institutional rather than technical.

Tutorials

Offline-First Field Operations: PWA, Trusted Web Activity, and the Sync Status Contract With the Inspector

Field inspectors do not have time to wonder whether their data was uploaded. The discipline behind offline-first design is the contract you make with the user about sync status, and the engineering that honours it.

Tutorials

Low-Bandwidth Web Performance for African Audiences: Engineering for Sub-3-Second Loads on Constrained Connections

A web platform that takes ten seconds to load on the connections the audience actually has is a platform the audience does not use. Engineering for sub-three-second performance on constrained connections is not a feature. It is the discipline that decides whether the audience reaches the platform at all.

Tutorials

AI on Public Sector Platforms: Grounded, Cited, and Subject to the Same Editorial Governance as Everything Else

Public sector AI cannot tolerate hallucination. The discipline of grounding every answer in cited source material, and routing every AI output through the same editorial governance as human content, is what makes it institutionally viable.

Tutorials

Human-in-the-Loop AI for Public Safety: Why Critical Alerts Should Never Auto-Diffuse

Full automation looks like the natural endpoint of an AI alerting system. It is not. Public-safety alerting requires institutional accountability that no algorithm can carry, and the architecture has to enforce the human validation that protects the chain of accountability.