Bolt

Every custody step, signed and in the open.

Each time a ballot envelope changes hands, the person, bot or scanner that did it signs the record. The signatures fold into one fingerprint per jurisdiction, and anyone can check it.

Building the tree…

The record right now

One row per jurisdiction. The fingerprint (root hash) commits the ledger to that jurisdiction's whole history. If a later fingerprint doesn't extend an earlier one, something was rewritten, and witnesses refuse to sign it.

JurisdictionEventsCosigned byFingerprint
Loading…

Witnessed from outside

Ledgers in other states and countries check each new fingerprint against the last one they saw, sign it if it only grew, and compare notes with each other. A server can't quietly show one history to the public and another to auditors.

Jurisdiction ledger Cosignature

Check it yourself

You don't need an account. You need the ledger's public key and the free auditor tool.

  1. Get the public key

    Fetch it from this site and compare it with the one published by the jurisdiction.

    curl https://ledger.example/v1/ledger-key
  2. Check a receipt

    Anyone given a receipt can prove that event is inside the signed history.

    python -m conductor.audit receipt \
      https://ledger.example US-FL-086 4 <hash> \
      --ledger-key <key>
  3. Watch for rewrites

    Run the monitor on a schedule. It fails and saves evidence if any history shrinks or changes.

    python -m conductor.audit monitor \
      https://ledger.example --ledger-key <key>

What this record holds

Custody facts only: who moved which envelope, from which state to which, and who checked it. The ledger refuses ballot selections, biometrics and personal ID numbers at any depth.

Signed summaries, proofs and the rules for each place are public. Event details are visible only to signed-in staff in their own jurisdictions.

Problems found here are preserved as evidence and referred to the responsible officials. Nothing on this site acts on any other system.