Public integrity record

Verify the vote ledger.

Civitus commits each closed UTC day's append-only event hashes and reported totals into one Merkle-root payload. When anchoring is enabled, OpenTimestamps can later prove that payload existed by a specific Bitcoin block. The proof does not establish that an input was correct; it makes later alteration of the committed record detectable.

Public leaf records never include a person's choice or identity. Bill-scoped commitments cannot be used to follow one participant across bills. Cohorts with fewer than 10 daily participants remain inside the private Merkle tree and are available only through an owner's inclusion proof.