[cyberpanther]

If it were me, I would start two parallel tasks.

1. Start looking for a new job, so I could be free to report the problems.

2. Start working internally to fix the problem. This sounds like it will have to happen outside normal channels. And while you may have a gatekeeper that will block the acceptance of "the fix", at least if it is ready to go, when the sh* hits the fan you can propose "the fix" and have it implemented faster.

I did #2 once and sat on a software patch for about 3-4 months because politically people in the organization people were trying to block me. The work wasn't officially approved, I decided to do it as an extra effort on my time. However, a new requirement came down which needed the new margin of safety calculated correctly and my patch already did the job. Suddenly my "unapproved" software work was in production within 2 weeks.