feat: integrate confidential ballot provider evidence

2026-08-02 03:41:05 +02:00
parent 133e55987e
commit 11b946ea78
4 changed files with 36 additions and 1 deletions
@@ -73,6 +73,11 @@ Approval, and evidence.

 A governed ballot is delegated to `voting.ballots` when Voting is installed;
 Committee retains the meeting/agendum linkage and verified aggregate result.
+For provider-backed Voting ballots, Committee also snapshots the assurance
+profile, provider and ballot references, and sanitized provider evidence. A
+reference `local_confidential` result remains explicitly uncertified; its
+server-encrypted casts do not satisfy secret-ballot, anonymity,
+coercion-resistance, or legal-certification requirements.
 The following direct provider path remains a 0.1 compatibility contract only.
 A provider-bound vote on that path is finalized through
 `committee.ballot_adapter.<provider>`. The adapter receives tenant, vote,