1. The Initial Bulletin Board Posting 1 st Batch2 nd BatchEmpty forms Envelopes are: Opaque Sealed Bubbles unfilled Serial numbered (numbers unique per batch)

2. The Pre-printed Ballots Candidate list permutations are random and kept hidden

3. Voter Gets Two Ballots & Folds/Fills Voter chooses which to fold & which to fill

4. Voter Gets Receipt & Casts Voter copies ballot (through redacting folder) Ballot carried in redacting folder Voter deposits ballot in ballot box (still in folder) Voter takes folded ballot and redacted copy of cast ballot as receipt Copy

5. Folded Ballot Challenge Everyone can see that the envelopes in the chain pointed to by the folded ballot were formed correctly.

6. Marking First Envelopes Simple transfer from the ballot box to the bulletin board (checked next)

7. Marked Envelope Challenge Voters can check that what’s posted matches receipt

8. 1 st Trustee Transfers Marks 1 st trustee knows what’s written inside envelopes of the 1 st batch and can transfer the mark accordingly Link not revealed

9. 2 nd Trustee Transfers Marks 2 nd trustee knows what’s in 2 nd batch envelopes and uses it to transfer marks

10. Public Random Challenge Coin flip per envelope in the first batch, like a lottery draw

11. Heads: 1 st Envelope Opened X-Ray View Transferred mark verified consistent with previously secret content of envelope

12. Tails: 2 nd Envelope Opened X-Ray View Transfer verified consistent with content of second envelope