Ballot secrecy
No component may link a cast ballot to its voter, and the private key is divided among trustees.
Election assurance
Security Model
SEVA's architecture is governed by eight non-negotiable invariants.
Outcome evidence
Paper is the authoritative evidence boundary and software changes must not create undetectable result changes.
Network and data boundaries
No egress is allowed while voting is open or paused, and backup transport cannot carry voter rolls or ballots.
Continue exploring SEVA
SEVA OverviewHow SEVA WorksElection SetupVoter ManagementCandidate and Position ManagementVoting Process
Return to SparkGlim