A digital public service is only as sovereign as the building its records sit in. Four questions settle it, and none of them are answered by a clause in a contract.