Implement governed voting module

2026-08-01 20:57:25 +02:00
commit c176c5cfcb
26 changed files with 3758 additions and 0 deletions
@@ -0,0 +1,19 @@
+# GovOPlaN Voting
+
+`govoplan-voting` owns governed ballot definitions, frozen electorate
+snapshots, ballot casting and replacement, deterministic tallying, result
+certification, challenges, annulment, and provider evidence.
+
+The native `recorded` assurance profile is auditable but not secret: active
+ballots are stored so that a result can be reconstructed. Confidential,
+secret, and externally certified profiles fail closed unless an explicit
+`voting.provider.<provider>` capability is installed. Providers return only
+aggregate results and evidence; raw secret ballots and provider credentials
+do not enter the Voting database.
+
+Committee and other modules retain their deliberation or business context and
+refer to Voting ballots through the `voting.ballots` capability. Informal
+preference and availability collection remains in `govoplan-poll`.
+
+See [the domain and assurance boundary](docs/VOTING_DOMAIN.md) for operations,
+security, recovery, and integration details.