# at.eptss.ballot

> Published by [eptss.at](https://lexicon.garden/identity/did:plc:pf6izdjdonyd46isl3txwu4g)

✓ This is the authoritative definition for this NSID.

## Links

- [View on Lexicon Garden](https://lexicon.garden/lexicon/did:plc:pf6izdjdonyd46isl3txwu4g/at.eptss.ballot)
- [Documentation](https://lexicon.garden/lexicon/did:plc:pf6izdjdonyd46isl3txwu4g/at.eptss.ballot/docs)
- [Examples](https://lexicon.garden/lexicon/did:plc:pf6izdjdonyd46isl3txwu4g/at.eptss.ballot/examples)

## Definitions

### `at.eptss.ballot`

**Type**: `record`

A voter's public attestation: 'I voted on this ballot sheet.' Written to the voter's own repo. The ledger strongRef pins the exact candidateLedger (URI and CID) the vote was cast against, making post-hoc ledger edits detectable. Scores are never public: privateRef resolves only through the round organizer's private sidecar.

**Key**: `any`

| Property | Type | Required | Description |
|----------|------|----------|-------------|
| `ledger` | `ref` → `com.atproto.repo.strongRef` | Yes | The at.eptss.candidateLedger this ballot was cast against. |
| `createdAt` | `string` (datetime) | Yes |  |
| `privateRef` | `string` | Yes | Opaque random identifier joining this ballot to the voter's private scores in the organizer's sidecar. Never derived from content. |

## Raw Schema

```json
{
  "id": "at.eptss.ballot",
  "defs": {
    "main": {
      "key": "any",
      "type": "record",
      "record": {
        "type": "object",
        "required": [
          "ledger",
          "privateRef",
          "createdAt"
        ],
        "properties": {
          "ledger": {
            "ref": "com.atproto.repo.strongRef",
            "type": "ref",
            "description": "The at.eptss.candidateLedger this ballot was cast against."
          },
          "createdAt": {
            "type": "string",
            "format": "datetime"
          },
          "privateRef": {
            "type": "string",
            "maxLength": 64,
            "description": "Opaque random identifier joining this ballot to the voter's private scores in the organizer's sidecar. Never derived from content."
          }
        }
      },
      "description": "A voter's public attestation: 'I voted on this ballot sheet.' Written to the voter's own repo. The ledger strongRef pins the exact candidateLedger (URI and CID) the vote was cast against, making post-hoc ledger edits detectable. Scores are never public: privateRef resolves only through the round organizer's private sidecar."
    }
  },
  "$type": "com.atproto.lexicon.schema",
  "lexicon": 1
}
```