Product · Platform
API, log, and legitimacy pages
The backend is the integrity substrate: membership store, device bindings, decision lifecycle, Mode B cast verification, append-only log, and public HTML pages anyone can use to check results and trackers.
Capabilities
- Multi-tenant voting systems with procedure packs and settings
- Officer auth (sessions, optional TOTP), rate limits, CORS for portal
- Device bind / recover / rotate; recovery cooling-off
- POST /v1/votes/cast — device signature required
- Public pages: system hub, results, log verify, tracker inclusion
- Clerk export, metrics, webhooks, blob evidence, audit packs + verifier CLI
- Docker Compose profiles for Postgres, full auth, and observability
Protocol
Contracts live in publicvoting-protocol: OpenAPI, Mode B suite and test vectors, procedure packs, SemVer VERSION. The API vendors snapshots for offline CI.
Self-host vs our hosted lease
| Option | You operate | We operate |
|---|---|---|
| Self-host | Infra, backups, upgrades, officer bootstrap | Community docs & OSS releases |
| Hosted lease | Membership content, political process | Environment, availability targets, provisioned system |