{
"id": "at.eptss.ballot",
"defs": {
"main": {
"key": "any",
"type": "record",
"record": {
"type": "object",
"required": [
"ledger",
"privateRef",
"createdAt"
],
"properties": {
"ledger": {
"ref": "com.atproto.repo.strongRef",
"type": "ref",
"description": "The at.eptss.candidateLedger this ballot was cast against."
},
"createdAt": {
"type": "string",
"format": "datetime"
},
"privateRef": {
"type": "string",
"maxLength": 64,
"description": "Opaque random identifier joining this ballot to the voter's private scores in the organizer's sidecar. Never derived from content."
}
}
},
"description": "A voter's public attestation: 'I voted on this ballot sheet.' Written to the voter's own repo. The ledger strongRef pins the exact candidateLedger (URI and CID) the vote was cast against, making post-hoc ledger edits detectable. Scores are never public: privateRef resolves only through the round organizer's private sidecar."
}
},
"$type": "com.atproto.lexicon.schema",
"lexicon": 1
}