@openvtc/trust-tasks 0.26.25 → 0.26.26

package/dist/voting/board/read/0.1/payload.d.ts

@@ -2,7 +2,7 @@
  * Generated by scripts/build-ts-bindings.mjs — DO NOT EDIT BY HAND.
  * Source: specs/voting/board/read/0.1/payload.schema.json
  */
-import type { Answer, Ballot, BoardEntry, BoardHead, Cast, CastEntry, DigestMultibase, ElectionId, ElectionResult, Ext, Key_VotingV0_1 as Key, LifecycleEntry, Multibase_VotingV0_1 as Multibase, QuestionResult, ReplacementEntry, ResultEntry } from "../../../../_shared/components.js";
+import type { Answer, Ballot, BoardEntry, BoardHead, Cast, CastEntry, ConfirmationEntry, Dealing, DealingEntry, DecryptionTarget, DigestMultibase, ElectionId, ElectionKey, ElectionKeyEntry, ElectionResult, ElGamalCiphertext, EncryptedCast, EncryptedCastEntry, Ext, GroupElement, GroupScalar, JustificationEntry, Key_VotingV0_1 as Key, LifecycleEntry, Multibase_VotingV0_1 as Multibase, PartialDecryption, PartialDecryptionsEntry, QuestionResult, ReplacementEntry, ResultEntry, SealedPayload, SealedShare, SigmaProof, SpoiledEntry, TransportKey, TransportKeyEntry, TrusteeIndex, UnsealedEntry } from "../../../../_shared/components.js";
 /**
  * Reads a range of an election board's entries, against the current head or against an earlier tree size.
  */
@@ -47,7 +47,7 @@ export interface VotingBoardReadResponsePayload {
     ext?: Ext;
 }
 /** Shared definitions this specification references, re-exported under the names it used to declare them with. */
-export type { Answer, Ballot, BoardEntry, BoardHead, Cast, CastEntry, DigestMultibase, ElectionId, ElectionResult, Ext, Key, LifecycleEntry, Multibase, QuestionResult, ReplacementEntry, ResultEntry };
+export type { Answer, Ballot, BoardEntry, BoardHead, Cast, CastEntry, ConfirmationEntry, Dealing, DealingEntry, DecryptionTarget, DigestMultibase, ElectionId, ElectionKey, ElectionKeyEntry, ElectionResult, ElGamalCiphertext, EncryptedCast, EncryptedCastEntry, Ext, GroupElement, GroupScalar, JustificationEntry, Key, LifecycleEntry, Multibase, PartialDecryption, PartialDecryptionsEntry, QuestionResult, ReplacementEntry, ResultEntry, SealedPayload, SealedShare, SigmaProof, SpoiledEntry, TransportKey, TransportKeyEntry, TrusteeIndex, UnsealedEntry };
 /** Trust Task type URI. */
 export declare const TYPE_URI: "https://trusttasks.org/spec/voting/board/read/0.1";
 /** Stable alias for this specification's request payload shape. */
@@ -220,174 +220,151 @@ export declare const PAYLOAD_SCHEMA: {
                         readonly $ref: "#/$defs/ElectionResult";
                     };
                 };
-            }];
-        };
-        readonly ElectionResult: {
-            readonly title: "ElectionResult";
-            readonly description: "An election's result, computable by anyone who can read its board from the board and the registration alone (VTI-VOT-070).";
-            readonly type: "object";
-            readonly additionalProperties: false;
-            readonly required: readonly ["electionId", "manifestDigest", "ballotsCounted", "questions", "head"];
-            readonly properties: {
-                readonly electionId: {
-                    readonly $ref: "#/$defs/ElectionId";
-                };
-                readonly manifestDigest: {
-                    readonly $ref: "#/$defs/DigestMultibase";
-                };
-                readonly ballotsCounted: {
-                    readonly type: "integer";
-                    readonly minimum: 0;
-                };
-                readonly questions: {
-                    readonly type: "array";
-                    readonly items: {
-                        readonly $ref: "#/$defs/QuestionResult";
+            }, {
+                readonly title: "EncryptedCastEntry";
+                readonly type: "object";
+                readonly additionalProperties: false;
+                readonly required: readonly ["kind", "cast"];
+                readonly properties: {
+                    readonly kind: {
+                        readonly const: "encryptedCast";
+                    };
+                    readonly cast: {
+                        readonly $ref: "#/$defs/EncryptedCast";
                     };
                 };
-                readonly head: {
-                    readonly $ref: "#/$defs/BoardHead";
-                    readonly description: "The head of the board as it stood at close: the result counts exactly its entries.";
-                };
-            };
-        };
-        readonly BoardHead: {
-            readonly title: "BoardHead";
-            readonly description: "A board's tree head (RFC 9162 §2.1). A head is signed by being carried in a document the ballot box signs; whoever keeps a head keeps that whole document.";
-            readonly type: "object";
-            readonly additionalProperties: false;
-            readonly required: readonly ["electionId", "treeSize", "rootHash", "issuedAt"];
-            readonly properties: {
-                readonly electionId: {
-                    readonly $ref: "#/$defs/ElectionId";
-                };
-                readonly treeSize: {
-                    readonly type: "integer";
-                    readonly minimum: 0;
-                };
-                readonly rootHash: {
-                    readonly $ref: "#/$defs/DigestMultibase";
-                    readonly description: "The RFC 9162 Merkle tree hash (SHA-256) of the first `treeSize` entries, as a multihash.";
-                };
-                readonly issuedAt: {
-                    readonly type: "string";
-                    readonly format: "date-time";
-                };
-            };
-        };
-        readonly ElectionId: {
-            readonly title: "ElectionId";
-            readonly description: "An election's identifier, unique within its community. A closed alphabet: it appears in the ticket class label `voter/<electionId>` and is framed into every hash a cast is bound to.";
-            readonly type: "string";
-            readonly pattern: "^[A-Za-z0-9._-]{1,128}$";
-        };
-        readonly DigestMultibase: {
-            readonly title: "DigestMultibase";
-            readonly description: "A cryptographic digest as a multibase-encoded multihash — the encoding the W3C Verifiable Credentials Data Model 2.0 defines for `digestMultibase`, and the one `did:webvh` uses for its SCID and entry hashes.\n\nMultihash carries the hash algorithm in-band, so the value is self-describing and the wire format survives an algorithm change without a schema revision; multibase does the same for the base encoding, so a verifier never infers base58 from base64url by context. A bare hex string or a `sha-256:`-style prefix hard-codes one algorithm into the wire contract and is non-conforming here.\n\nThis definition constrains the *encoding only*. What the digest is computed over is stated by each referencing field, because it differs legitimately: a digest over a JSON document is taken over its RFC 8785 (JCS) canonicalization, while a digest over an opaque artifact is taken over its bytes. A field whose input is a JSON document and which does not name a canonicalization is not reproducible.\n\nRestricted to the two multibase headers W3C Controlled Identifiers 1.0 §2.4 normatively requires — `z` (base58btc) and `u` (base64url-no-pad). CID permits others but states that \"interoperability is not guaranteed between implementations using such values\", and a registry whose purpose is interoperability should not mint digests a conforming verifier may be unable to read. The alphabets are enforced rather than assumed: base58btc excludes 0, O, I and l, and an earlier permissive pattern let three published examples carry digests that were not valid base58 at all. base58btc is RECOMMENDED, for consistency with `did:key` and `did:webvh`.";
-            readonly type: "string";
-            readonly minLength: 16;
-            readonly pattern: "^(z[1-9A-HJ-NP-Za-km-z]+|u[A-Za-z0-9_-]+)$";
-            readonly examples: readonly ["zQmbWqxBEKC3P8tqsKc98xmWNzrzDtRLMiMPL8wBuTGsMnR"];
-        };
-        readonly QuestionResult: {
-            readonly title: "QuestionResult";
-            readonly description: "One question's totals. `choice`: selections per option. `ranking`: per option, how many ballots placed it at each position (index 0 = first). `score`: per option, the sum and the number of ballots that scored it. `text`: the answers, in board order, withheld (`withheld: true`) below the manifest's `textReleaseThreshold`. `abstained` counts ballots that left the question unanswered.";
-            readonly type: "object";
-            readonly additionalProperties: false;
-            readonly required: readonly ["question", "abstained"];
-            readonly properties: {
-                readonly question: {
-                    readonly $ref: "#/$defs/Key";
-                };
-                readonly abstained: {
-                    readonly type: "integer";
-                    readonly minimum: 0;
+            }, {
+                readonly title: "TransportKeyEntry";
+                readonly type: "object";
+                readonly additionalProperties: false;
+                readonly required: readonly ["kind", "transportKey"];
+                readonly properties: {
+                    readonly kind: {
+                        readonly const: "transportKey";
+                    };
+                    readonly transportKey: {
+                        readonly $ref: "#/$defs/TransportKey";
+                    };
                 };
-                readonly choice: {
-                    readonly type: "object";
-                    readonly propertyNames: {
-                        readonly $ref: "#/$defs/Key";
+            }, {
+                readonly title: "DealingEntry";
+                readonly type: "object";
+                readonly additionalProperties: false;
+                readonly required: readonly ["kind", "dealing"];
+                readonly properties: {
+                    readonly kind: {
+                        readonly const: "dealing";
                     };
-                    readonly additionalProperties: {
-                        readonly type: "integer";
-                        readonly minimum: 0;
+                    readonly dealing: {
+                        readonly $ref: "#/$defs/Dealing";
                     };
                 };
-                readonly ranking: {
-                    readonly type: "object";
-                    readonly propertyNames: {
-                        readonly $ref: "#/$defs/Key";
+            }, {
+                readonly title: "ConfirmationEntry";
+                readonly type: "object";
+                readonly additionalProperties: false;
+                readonly required: readonly ["kind", "trustee", "complaints"];
+                readonly properties: {
+                    readonly kind: {
+                        readonly const: "confirmation";
                     };
-                    readonly additionalProperties: {
+                    readonly trustee: {
+                        readonly $ref: "#/$defs/TrusteeIndex";
+                    };
+                    readonly complaints: {
                         readonly type: "array";
+                        readonly maxItems: 64;
                         readonly items: {
-                            readonly type: "integer";
-                            readonly minimum: 0;
+                            readonly $ref: "#/$defs/TrusteeIndex";
                         };
                     };
                 };
-                readonly score: {
-                    readonly type: "object";
-                    readonly propertyNames: {
-                        readonly $ref: "#/$defs/Key";
+            }, {
+                readonly title: "JustificationEntry";
+                readonly type: "object";
+                readonly additionalProperties: false;
+                readonly required: readonly ["kind", "dealer", "recipient", "share"];
+                readonly properties: {
+                    readonly kind: {
+                        readonly const: "justification";
                     };
-                    readonly additionalProperties: {
-                        readonly type: "object";
-                        readonly additionalProperties: false;
-                        readonly required: readonly ["sum", "count"];
-                        readonly properties: {
-                            readonly sum: {
-                                readonly type: "integer";
-                            };
-                            readonly count: {
-                                readonly type: "integer";
-                                readonly minimum: 0;
-                            };
-                        };
+                    readonly dealer: {
+                        readonly $ref: "#/$defs/TrusteeIndex";
                     };
-                };
-                readonly text: {
-                    readonly type: "array";
-                    readonly items: {
-                        readonly type: "string";
-                        readonly maxLength: 4096;
+                    readonly recipient: {
+                        readonly $ref: "#/$defs/TrusteeIndex";
+                    };
+                    readonly share: {
+                        readonly $ref: "#/$defs/GroupScalar";
                     };
                 };
-                readonly withheld: {
-                    readonly type: "boolean";
+            }, {
+                readonly title: "ElectionKeyEntry";
+                readonly type: "object";
+                readonly additionalProperties: false;
+                readonly required: readonly ["kind", "electionKey"];
+                readonly properties: {
+                    readonly kind: {
+                        readonly const: "electionKey";
+                    };
+                    readonly electionKey: {
+                        readonly $ref: "#/$defs/ElectionKey";
+                    };
                 };
-            };
-        };
-        readonly Key: {
-            readonly title: "Key";
-            readonly description: "A question or option key, unique within its manifest or question.";
-            readonly type: "string";
-            readonly pattern: "^[A-Za-z0-9._-]{1,64}$";
-        };
-        readonly Multibase: {
-            readonly title: "Multibase";
-            readonly description: "A binary value, multibase base58btc over the suite's canonical (compressed) encoding.";
-            readonly type: "string";
-            readonly maxLength: 16384;
-            readonly pattern: "^z[1-9A-HJ-NP-Za-km-z]+$";
-        };
-        readonly Cast: {
-            readonly title: "Cast";
-            readonly description: "A ballot and the PCS attestation that admits it (VTI-VOT-030). `attestation` is the suite's canonical encoding of the attestation made for the election point with the ballot context bound in (CONVENTIONS §3); `tag` repeats its tag so a ballot box can refuse a duplicate before the pairing check.";
-            readonly type: "object";
-            readonly additionalProperties: false;
-            readonly required: readonly ["ballot", "tag", "attestation"];
-            readonly properties: {
-                readonly ballot: {
-                    readonly $ref: "#/$defs/Ballot";
+            }, {
+                readonly title: "PartialDecryptionsEntry";
+                readonly type: "object";
+                readonly additionalProperties: false;
+                readonly required: readonly ["kind", "trustee", "partials"];
+                readonly properties: {
+                    readonly kind: {
+                        readonly const: "partials";
+                    };
+                    readonly trustee: {
+                        readonly $ref: "#/$defs/TrusteeIndex";
+                    };
+                    readonly partials: {
+                        readonly type: "array";
+                        readonly minItems: 1;
+                        readonly maxItems: 100000;
+                        readonly items: {
+                            readonly $ref: "#/$defs/PartialDecryption";
+                        };
+                    };
                 };
-                readonly tag: {
-                    readonly $ref: "#/$defs/Multibase";
+            }, {
+                readonly title: "UnsealedEntry";
+                readonly type: "object";
+                readonly additionalProperties: false;
+                readonly required: readonly ["kind", "leafIndex", "ballot"];
+                readonly properties: {
+                    readonly kind: {
+                        readonly const: "unsealed";
+                    };
+                    readonly leafIndex: {
+                        readonly type: "integer";
+                        readonly minimum: 0;
+                    };
+                    readonly ballot: {
+                        readonly $ref: "#/$defs/Ballot";
+                    };
                 };
-                readonly attestation: {
-                    readonly $ref: "#/$defs/Multibase";
+            }, {
+                readonly title: "SpoiledEntry";
+                readonly description: "A sealed cast that did not open, or opened to no valid ballot: not counted (CONVENTIONS §9.7).";
+                readonly type: "object";
+                readonly additionalProperties: false;
+                readonly required: readonly ["kind", "leafIndex"];
+                readonly properties: {
+                    readonly kind: {
+                        readonly const: "spoiled";
+                    };
+                    readonly leafIndex: {
+                        readonly type: "integer";
+                        readonly minimum: 0;
+                    };
                 };
-            };
+            }];
         };
         readonly Ballot: {
             readonly title: "Ballot";
@@ -456,130 +433,347 @@ export declare const PAYLOAD_SCHEMA: {
                 };
             };
         };
-    };
-};
-/** As {@link PAYLOAD_SCHEMA}, for the success-response variant. */
-export declare const RESPONSE_PAYLOAD_SCHEMA: {
-    readonly $schema: "https://json-schema.org/draft/2020-12/schema";
-    readonly $ref: "#/$defs/Response";
-    readonly $defs: {
-        readonly Response: {
-            readonly $anchor: "response";
-            readonly title: "Voting — Board Read — response payload";
+        readonly Key: {
+            readonly title: "Key";
+            readonly description: "A question or option key, unique within its manifest or question.";
+            readonly type: "string";
+            readonly pattern: "^[A-Za-z0-9._-]{1,64}$";
+        };
+        readonly ElectionId: {
+            readonly title: "ElectionId";
+            readonly description: "An election's identifier, unique within its community. A closed alphabet: it appears in the ticket class label `voter/<electionId>` and is framed into every hash a cast is bound to.";
+            readonly type: "string";
+            readonly pattern: "^[A-Za-z0-9._-]{1,128}$";
+        };
+        readonly DigestMultibase: {
+            readonly title: "DigestMultibase";
+            readonly description: "A cryptographic digest as a multibase-encoded multihash — the encoding the W3C Verifiable Credentials Data Model 2.0 defines for `digestMultibase`, and the one `did:webvh` uses for its SCID and entry hashes.\n\nMultihash carries the hash algorithm in-band, so the value is self-describing and the wire format survives an algorithm change without a schema revision; multibase does the same for the base encoding, so a verifier never infers base58 from base64url by context. A bare hex string or a `sha-256:`-style prefix hard-codes one algorithm into the wire contract and is non-conforming here.\n\nThis definition constrains the *encoding only*. What the digest is computed over is stated by each referencing field, because it differs legitimately: a digest over a JSON document is taken over its RFC 8785 (JCS) canonicalization, while a digest over an opaque artifact is taken over its bytes. A field whose input is a JSON document and which does not name a canonicalization is not reproducible.\n\nRestricted to the two multibase headers W3C Controlled Identifiers 1.0 §2.4 normatively requires — `z` (base58btc) and `u` (base64url-no-pad). CID permits others but states that \"interoperability is not guaranteed between implementations using such values\", and a registry whose purpose is interoperability should not mint digests a conforming verifier may be unable to read. The alphabets are enforced rather than assumed: base58btc excludes 0, O, I and l, and an earlier permissive pattern let three published examples carry digests that were not valid base58 at all. base58btc is RECOMMENDED, for consistency with `did:key` and `did:webvh`.";
+            readonly type: "string";
+            readonly minLength: 16;
+            readonly pattern: "^(z[1-9A-HJ-NP-Za-km-z]+|u[A-Za-z0-9_-]+)$";
+            readonly examples: readonly ["zQmbWqxBEKC3P8tqsKc98xmWNzrzDtRLMiMPL8wBuTGsMnR"];
+        };
+        readonly PartialDecryption: {
+            readonly title: "PartialDecryption";
+            readonly description: "Trustee `trustee`'s share of one decryption, `d = x_j·a`, with a Chaum–Pedersen proof against its verification key (CONVENTIONS §9.7).";
             readonly type: "object";
             readonly additionalProperties: false;
-            readonly required: readonly ["treeSize", "entries"];
+            readonly required: readonly ["target", "d", "proof"];
             readonly properties: {
-                readonly treeSize: {
-                    readonly type: "integer";
-                    readonly minimum: 0;
-                    readonly description: "The tree size the page was read against. No entry at or beyond it is returned.";
+                readonly target: {
+                    readonly $ref: "#/$defs/DecryptionTarget";
                 };
-                readonly entries: {
+                readonly d: {
+                    readonly $ref: "#/$defs/GroupElement";
+                };
+                readonly proof: {
+                    readonly $ref: "#/$defs/SigmaProof";
+                };
+            };
+        };
+        readonly SigmaProof: {
+            readonly title: "SigmaProof";
+            readonly description: "A non-interactive sigma proof as its challenge and response `(c, z)` (Schnorr or Chaum–Pedersen; CONVENTIONS §9.3).";
+            readonly type: "object";
+            readonly additionalProperties: false;
+            readonly required: readonly ["c", "z"];
+            readonly properties: {
+                readonly c: {
+                    readonly $ref: "#/$defs/GroupScalar";
+                };
+                readonly z: {
+                    readonly $ref: "#/$defs/GroupScalar";
+                };
+            };
+        };
+        readonly GroupScalar: {
+            readonly title: "GroupScalar";
+            readonly description: "A scalar mod the Ristretto group order: 32 canonical little-endian bytes, multibase base58btc (CONVENTIONS §9.1).";
+            readonly type: "string";
+            readonly minLength: 2;
+            readonly maxLength: 64;
+            readonly pattern: "^z[1-9A-HJ-NP-Za-km-z]+$";
+        };
+        readonly GroupElement: {
+            readonly title: "GroupElement";
+            readonly description: "A Ristretto group element: its 32-byte compression, multibase base58btc. Never the identity (CONVENTIONS §9.1).";
+            readonly type: "string";
+            readonly minLength: 2;
+            readonly maxLength: 64;
+            readonly pattern: "^z[1-9A-HJ-NP-Za-km-z]+$";
+        };
+        readonly DecryptionTarget: {
+            readonly title: "DecryptionTarget";
+            readonly description: "What a partial decryption decrypts: the sealed cast at a board leaf, or the total of one option of one question.";
+            readonly type: "object";
+            readonly additionalProperties: false;
+            readonly required: readonly ["ciphertext"];
+            readonly properties: {
+                readonly leafIndex: {
+                    readonly type: "integer";
+                    readonly minimum: 0;
+                    readonly description: "A sealed cast's board leaf.";
+                };
+                readonly question: {
+                    readonly $ref: "#/$defs/Key";
+                };
+                readonly option: {
+                    readonly $ref: "#/$defs/Key";
+                };
+                readonly ciphertext: {
+                    readonly $ref: "#/$defs/ElGamalCiphertext";
+                };
+            };
+            readonly oneOf: readonly [{
+                readonly required: readonly ["leafIndex"];
+            }, {
+                readonly required: readonly ["question", "option"];
+            }];
+        };
+        readonly ElGamalCiphertext: {
+            readonly title: "ElGamalCiphertext";
+            readonly description: "`(a, b) = (r·G, M + r·Y)` under the election key `Y` (CONVENTIONS §9.2).";
+            readonly type: "object";
+            readonly additionalProperties: false;
+            readonly required: readonly ["a", "b"];
+            readonly properties: {
+                readonly a: {
+                    readonly $ref: "#/$defs/GroupElement";
+                };
+                readonly b: {
+                    readonly $ref: "#/$defs/GroupElement";
+                };
+            };
+        };
+        readonly TrusteeIndex: {
+            readonly title: "TrusteeIndex";
+            readonly description: "A trustee's index: its position in the manifest's `trustees.dids`, counting from 1.";
+            readonly type: "integer";
+            readonly minimum: 1;
+            readonly maximum: 64;
+        };
+        readonly ElectionKey: {
+            readonly title: "ElectionKey";
+            readonly description: "The election key and each trustee's public verification key, computed from the qualified dealings (CONVENTIONS §9.6). Anyone can recompute it from the board.";
+            readonly type: "object";
+            readonly additionalProperties: false;
+            readonly required: readonly ["key", "qualified", "verification"];
+            readonly properties: {
+                readonly key: {
+                    readonly $ref: "#/$defs/GroupElement";
+                };
+                readonly qualified: {
                     readonly type: "array";
-                    readonly maxItems: 1000;
+                    readonly minItems: 1;
+                    readonly maxItems: 64;
+                    readonly items: {
+                        readonly $ref: "#/$defs/TrusteeIndex";
+                    };
+                    readonly description: "The dealers whose dealings the key is formed from.";
+                };
+                readonly verification: {
+                    readonly type: "array";
+                    readonly minItems: 2;
+                    readonly maxItems: 64;
                     readonly items: {
                         readonly type: "object";
                         readonly additionalProperties: false;
-                        readonly required: readonly ["index", "entry"];
+                        readonly required: readonly ["trustee", "key"];
                         readonly properties: {
-                            readonly index: {
-                                readonly type: "integer";
-                                readonly minimum: 0;
+                            readonly trustee: {
+                                readonly $ref: "#/$defs/TrusteeIndex";
                             };
-                            readonly entry: {
-                                readonly $ref: "#/$defs/BoardEntry";
+                            readonly key: {
+                                readonly $ref: "#/$defs/GroupElement";
                             };
                         };
                     };
-                    readonly description: "Consecutive entries from `from`, in board order.";
                 };
-                readonly next: {
-                    readonly type: "integer";
-                    readonly minimum: 1;
-                    readonly description: "The `from` of the next page. Absent when the page reaches `treeSize`.";
+            };
+        };
+        readonly Dealing: {
+            readonly title: "Dealing";
+            readonly description: "A trustee's contribution to the election key: Feldman commitments to its polynomial, a proof of knowledge of the constant term, and one share per trustee sealed to that trustee's transport key (CONVENTIONS §9.6).";
+            readonly type: "object";
+            readonly additionalProperties: false;
+            readonly required: readonly ["dealer", "commitments", "pok", "shares"];
+            readonly properties: {
+                readonly dealer: {
+                    readonly $ref: "#/$defs/TrusteeIndex";
                 };
-                readonly ext: {
-                    readonly $ref: "#/$defs/Ext";
+                readonly commitments: {
+                    readonly type: "array";
+                    readonly minItems: 2;
+                    readonly maxItems: 64;
+                    readonly items: {
+                        readonly $ref: "#/$defs/GroupElement";
+                    };
+                };
+                readonly pok: {
+                    readonly $ref: "#/$defs/SigmaProof";
+                };
+                readonly shares: {
+                    readonly type: "array";
+                    readonly minItems: 2;
+                    readonly maxItems: 64;
+                    readonly items: {
+                        readonly $ref: "#/$defs/SealedShare";
+                    };
                 };
             };
         };
-        readonly Ext: {
-            readonly title: "Ext";
-            readonly description: "Vendor-namespaced extension object per SPEC.md §4.5.1. Each immediate key MUST be a reverse-DNS namespace; structure under each namespace is opaque to the framework.";
+        readonly SealedShare: {
+            readonly title: "SealedShare";
             readonly type: "object";
-            readonly minProperties: 1;
-            readonly additionalProperties: true;
-            readonly propertyNames: {
-                readonly pattern: "^[a-z][a-z0-9-]*(\\.[a-z0-9-]+)+$";
+            readonly additionalProperties: false;
+            readonly required: readonly ["recipient", "share"];
+            readonly properties: {
+                readonly recipient: {
+                    readonly $ref: "#/$defs/TrusteeIndex";
+                };
+                readonly share: {
+                    readonly $ref: "#/$defs/SealedPayload";
+                };
             };
         };
-        readonly BoardEntry: {
-            readonly title: "BoardEntry";
-            readonly description: "One leaf of a board. A leaf's hash is the RFC 9162 leaf hash of the JCS canonicalization of this object. Entries carry no time of arrival: the order is the board's, and a timestamp would hand anyone who reads the board the timing the registrar's log would need to pair a ticket with its cast.";
-            readonly oneOf: readonly [{
-                readonly title: "CastEntry";
-                readonly type: "object";
-                readonly additionalProperties: false;
-                readonly required: readonly ["kind", "cast"];
-                readonly properties: {
-                    readonly kind: {
-                        readonly const: "cast";
-                    };
-                    readonly cast: {
-                        readonly $ref: "#/$defs/Cast";
-                    };
+        readonly SealedPayload: {
+            readonly title: "SealedPayload";
+            readonly description: "Bytes sealed to a key: a random group element encrypted as `kem`, and the bytes under ChaCha20-Poly1305 with a key derived from it, multibase base58btc (CONVENTIONS §9.4).";
+            readonly type: "object";
+            readonly additionalProperties: false;
+            readonly required: readonly ["kem", "body"];
+            readonly properties: {
+                readonly kem: {
+                    readonly $ref: "#/$defs/ElGamalCiphertext";
                 };
-            }, {
-                readonly title: "ReplacementEntry";
-                readonly description: "The cast at `replaces` is no longer counted: a later cast under the same tag is.";
-                readonly type: "object";
-                readonly additionalProperties: false;
-                readonly required: readonly ["kind", "tag", "replaces", "by"];
-                readonly properties: {
-                    readonly kind: {
-                        readonly const: "replaced";
-                    };
-                    readonly tag: {
-                        readonly $ref: "#/$defs/Multibase";
-                    };
-                    readonly replaces: {
-                        readonly type: "integer";
-                        readonly minimum: 0;
-                    };
-                    readonly by: {
-                        readonly type: "integer";
-                        readonly minimum: 0;
-                    };
+                readonly body: {
+                    readonly type: "string";
+                    readonly minLength: 2;
+                    readonly maxLength: 131072;
+                    readonly pattern: "^z[1-9A-HJ-NP-Za-km-z]+$";
                 };
-            }, {
-                readonly title: "LifecycleEntry";
-                readonly type: "object";
-                readonly additionalProperties: false;
-                readonly required: readonly ["kind", "at"];
-                readonly properties: {
-                    readonly kind: {
-                        readonly enum: readonly ["opened", "closed", "closedEarly", "cancelled"];
-                    };
-                    readonly at: {
-                        readonly type: "string";
-                        readonly format: "date-time";
-                    };
+            };
+        };
+        readonly TransportKey: {
+            readonly title: "TransportKey";
+            readonly description: "The group element a trustee's shares are sealed to, with a Schnorr proof of knowledge of its discrete log (CONVENTIONS §9.6).";
+            readonly type: "object";
+            readonly additionalProperties: false;
+            readonly required: readonly ["trustee", "key", "pok"];
+            readonly properties: {
+                readonly trustee: {
+                    readonly $ref: "#/$defs/TrusteeIndex";
+                };
+                readonly key: {
+                    readonly $ref: "#/$defs/GroupElement";
+                };
+                readonly pok: {
+                    readonly $ref: "#/$defs/SigmaProof";
+                };
+            };
+        };
+        readonly EncryptedCast: {
+            readonly title: "EncryptedCast";
+            readonly description: "A cast of a sealed or tallied-encrypted election: exactly one of `sealed` (the Ballot's JCS bytes sealed to the election key) or `encrypted`, with the tag and the attestation over the JCS bytes of whichever is present (CONVENTIONS §3.6, §9.5).";
+            readonly type: "object";
+            readonly additionalProperties: false;
+            readonly required: readonly ["tag", "attestation"];
+            readonly properties: {
+                readonly sealed: {
+                    readonly $ref: "#/$defs/SealedPayload";
+                };
+                readonly encrypted: {
+                    readonly $ref: "#/$defs/EncryptedBallot";
+                };
+                readonly tag: {
+                    readonly $ref: "#/$defs/Multibase";
+                };
+                readonly attestation: {
+                    readonly $ref: "#/$defs/Multibase";
                 };
+            };
+            readonly oneOf: readonly [{
+                readonly required: readonly ["sealed"];
             }, {
-                readonly title: "ResultEntry";
-                readonly type: "object";
-                readonly additionalProperties: false;
-                readonly required: readonly ["kind", "result"];
-                readonly properties: {
-                    readonly kind: {
-                        readonly const: "result";
+                readonly required: readonly ["encrypted"];
+            }];
+        };
+        readonly Multibase: {
+            readonly title: "Multibase";
+            readonly description: "A binary value, multibase base58btc over the suite's canonical (compressed) encoding.";
+            readonly type: "string";
+            readonly maxLength: 16384;
+            readonly pattern: "^z[1-9A-HJ-NP-Za-km-z]+$";
+        };
+        readonly EncryptedBallot: {
+            readonly title: "EncryptedBallot";
+            readonly description: "A tallied-encrypted ballot: one EncryptedQuestion per manifest question, in the manifest's order. Never decrypted (VTI-VOT-064).";
+            readonly type: "object";
+            readonly additionalProperties: false;
+            readonly required: readonly ["electionId", "manifestDigest", "questions"];
+            readonly properties: {
+                readonly electionId: {
+                    readonly $ref: "#/$defs/ElectionId";
+                };
+                readonly manifestDigest: {
+                    readonly $ref: "#/$defs/DigestMultibase";
+                };
+                readonly questions: {
+                    readonly type: "array";
+                    readonly minItems: 1;
+                    readonly maxItems: 64;
+                    readonly items: {
+                        readonly $ref: "#/$defs/EncryptedQuestion";
                     };
-                    readonly result: {
-                        readonly $ref: "#/$defs/ElectionResult";
+                };
+            };
+        };
+        readonly EncryptedQuestion: {
+            readonly title: "EncryptedQuestion";
+            readonly description: "One choice question of a tallied-encrypted ballot: per option, in the manifest's order, an encryption of 0 or 1 with its proof; and a proof that the selections sum to a count the question admits (CONVENTIONS §9.5).";
+            readonly type: "object";
+            readonly additionalProperties: false;
+            readonly required: readonly ["question", "options", "sumProof"];
+            readonly properties: {
+                readonly question: {
+                    readonly $ref: "#/$defs/Key";
+                };
+                readonly options: {
+                    readonly type: "array";
+                    readonly minItems: 1;
+                    readonly maxItems: 64;
+                    readonly items: {
+                        readonly $ref: "#/$defs/EncryptedOption";
                     };
                 };
-            }];
+                readonly sumProof: {
+                    readonly $ref: "#/$defs/DisjunctiveProof";
+                };
+            };
+        };
+        readonly DisjunctiveProof: {
+            readonly title: "DisjunctiveProof";
+            readonly description: "A disjunctive proof that a ciphertext encrypts one value of a public list: one `(c, z)` per value, in the list's order (CONVENTIONS §9.3).";
+            readonly type: "array";
+            readonly minItems: 1;
+            readonly maxItems: 65;
+            readonly items: {
+                readonly $ref: "#/$defs/SigmaProof";
+            };
+        };
+        readonly EncryptedOption: {
+            readonly title: "EncryptedOption";
+            readonly type: "object";
+            readonly additionalProperties: false;
+            readonly required: readonly ["ciphertext", "proof"];
+            readonly properties: {
+                readonly ciphertext: {
+                    readonly $ref: "#/$defs/ElGamalCiphertext";
+                };
+                readonly proof: {
+                    readonly $ref: "#/$defs/DisjunctiveProof";
+                };
+            };
         };
         readonly ElectionResult: {
             readonly title: "ElectionResult";
@@ -634,20 +828,6 @@ export declare const RESPONSE_PAYLOAD_SCHEMA: {
                 };
             };
         };
-        readonly ElectionId: {
-            readonly title: "ElectionId";
-            readonly description: "An election's identifier, unique within its community. A closed alphabet: it appears in the ticket class label `voter/<electionId>` and is framed into every hash a cast is bound to.";
-            readonly type: "string";
-            readonly pattern: "^[A-Za-z0-9._-]{1,128}$";
-        };
-        readonly DigestMultibase: {
-            readonly title: "DigestMultibase";
-            readonly description: "A cryptographic digest as a multibase-encoded multihash — the encoding the W3C Verifiable Credentials Data Model 2.0 defines for `digestMultibase`, and the one `did:webvh` uses for its SCID and entry hashes.\n\nMultihash carries the hash algorithm in-band, so the value is self-describing and the wire format survives an algorithm change without a schema revision; multibase does the same for the base encoding, so a verifier never infers base58 from base64url by context. A bare hex string or a `sha-256:`-style prefix hard-codes one algorithm into the wire contract and is non-conforming here.\n\nThis definition constrains the *encoding only*. What the digest is computed over is stated by each referencing field, because it differs legitimately: a digest over a JSON document is taken over its RFC 8785 (JCS) canonicalization, while a digest over an opaque artifact is taken over its bytes. A field whose input is a JSON document and which does not name a canonicalization is not reproducible.\n\nRestricted to the two multibase headers W3C Controlled Identifiers 1.0 §2.4 normatively requires — `z` (base58btc) and `u` (base64url-no-pad). CID permits others but states that \"interoperability is not guaranteed between implementations using such values\", and a registry whose purpose is interoperability should not mint digests a conforming verifier may be unable to read. The alphabets are enforced rather than assumed: base58btc excludes 0, O, I and l, and an earlier permissive pattern let three published examples carry digests that were not valid base58 at all. base58btc is RECOMMENDED, for consistency with `did:key` and `did:webvh`.";
-            readonly type: "string";
-            readonly minLength: 16;
-            readonly pattern: "^(z[1-9A-HJ-NP-Za-km-z]+|u[A-Za-z0-9_-]+)$";
-            readonly examples: readonly ["zQmbWqxBEKC3P8tqsKc98xmWNzrzDtRLMiMPL8wBuTGsMnR"];
-        };
         readonly QuestionResult: {
             readonly title: "QuestionResult";
             readonly description: "One question's totals. `choice`: selections per option. `ranking`: per option, how many ballots placed it at each position (index 0 = first). `score`: per option, the sum and the number of ballots that scored it. `text`: the answers, in board order, withheld (`withheld: true`) below the manifest's `textReleaseThreshold`. `abstained` counts ballots that left the question unanswered.";
@@ -717,19 +897,6 @@ export declare const RESPONSE_PAYLOAD_SCHEMA: {
                 };
             };
         };
-        readonly Key: {
-            readonly title: "Key";
-            readonly description: "A question or option key, unique within its manifest or question.";
-            readonly type: "string";
-            readonly pattern: "^[A-Za-z0-9._-]{1,64}$";
-        };
-        readonly Multibase: {
-            readonly title: "Multibase";
-            readonly description: "A binary value, multibase base58btc over the suite's canonical (compressed) encoding.";
-            readonly type: "string";
-            readonly maxLength: 16384;
-            readonly pattern: "^z[1-9A-HJ-NP-Za-km-z]+$";
-        };
         readonly Cast: {
             readonly title: "Cast";
             readonly description: "A ballot and the PCS attestation that admits it (VTI-VOT-030). `attestation` is the suite's canonical encoding of the attestation made for the election point with the ballot context bound in (CONVENTIONS §3); `tag` repeats its tag so a ballot box can refuse a duplicate before the pairing check.";
@@ -748,13 +915,282 @@ export declare const RESPONSE_PAYLOAD_SCHEMA: {
                 };
             };
         };
-        readonly Ballot: {
-            readonly title: "Ballot";
-            readonly description: "An open ballot: one answer per question of the manifest, in any order. The bytes a cast's proof binds are the RFC 8785 (JCS) canonicalization of this object as received.";
-            readonly type: "object";
-            readonly additionalProperties: false;
-            readonly required: readonly ["electionId", "manifestDigest", "answers"];
-            readonly properties: {
+    };
+};
+/** As {@link PAYLOAD_SCHEMA}, for the success-response variant. */
+export declare const RESPONSE_PAYLOAD_SCHEMA: {
+    readonly $schema: "https://json-schema.org/draft/2020-12/schema";
+    readonly $ref: "#/$defs/Response";
+    readonly $defs: {
+        readonly Response: {
+            readonly $anchor: "response";
+            readonly title: "Voting — Board Read — response payload";
+            readonly type: "object";
+            readonly additionalProperties: false;
+            readonly required: readonly ["treeSize", "entries"];
+            readonly properties: {
+                readonly treeSize: {
+                    readonly type: "integer";
+                    readonly minimum: 0;
+                    readonly description: "The tree size the page was read against. No entry at or beyond it is returned.";
+                };
+                readonly entries: {
+                    readonly type: "array";
+                    readonly maxItems: 1000;
+                    readonly items: {
+                        readonly type: "object";
+                        readonly additionalProperties: false;
+                        readonly required: readonly ["index", "entry"];
+                        readonly properties: {
+                            readonly index: {
+                                readonly type: "integer";
+                                readonly minimum: 0;
+                            };
+                            readonly entry: {
+                                readonly $ref: "#/$defs/BoardEntry";
+                            };
+                        };
+                    };
+                    readonly description: "Consecutive entries from `from`, in board order.";
+                };
+                readonly next: {
+                    readonly type: "integer";
+                    readonly minimum: 1;
+                    readonly description: "The `from` of the next page. Absent when the page reaches `treeSize`.";
+                };
+                readonly ext: {
+                    readonly $ref: "#/$defs/Ext";
+                };
+            };
+        };
+        readonly Ext: {
+            readonly title: "Ext";
+            readonly description: "Vendor-namespaced extension object per SPEC.md §4.5.1. Each immediate key MUST be a reverse-DNS namespace; structure under each namespace is opaque to the framework.";
+            readonly type: "object";
+            readonly minProperties: 1;
+            readonly additionalProperties: true;
+            readonly propertyNames: {
+                readonly pattern: "^[a-z][a-z0-9-]*(\\.[a-z0-9-]+)+$";
+            };
+        };
+        readonly BoardEntry: {
+            readonly title: "BoardEntry";
+            readonly description: "One leaf of a board. A leaf's hash is the RFC 9162 leaf hash of the JCS canonicalization of this object. Entries carry no time of arrival: the order is the board's, and a timestamp would hand anyone who reads the board the timing the registrar's log would need to pair a ticket with its cast.";
+            readonly oneOf: readonly [{
+                readonly title: "CastEntry";
+                readonly type: "object";
+                readonly additionalProperties: false;
+                readonly required: readonly ["kind", "cast"];
+                readonly properties: {
+                    readonly kind: {
+                        readonly const: "cast";
+                    };
+                    readonly cast: {
+                        readonly $ref: "#/$defs/Cast";
+                    };
+                };
+            }, {
+                readonly title: "ReplacementEntry";
+                readonly description: "The cast at `replaces` is no longer counted: a later cast under the same tag is.";
+                readonly type: "object";
+                readonly additionalProperties: false;
+                readonly required: readonly ["kind", "tag", "replaces", "by"];
+                readonly properties: {
+                    readonly kind: {
+                        readonly const: "replaced";
+                    };
+                    readonly tag: {
+                        readonly $ref: "#/$defs/Multibase";
+                    };
+                    readonly replaces: {
+                        readonly type: "integer";
+                        readonly minimum: 0;
+                    };
+                    readonly by: {
+                        readonly type: "integer";
+                        readonly minimum: 0;
+                    };
+                };
+            }, {
+                readonly title: "LifecycleEntry";
+                readonly type: "object";
+                readonly additionalProperties: false;
+                readonly required: readonly ["kind", "at"];
+                readonly properties: {
+                    readonly kind: {
+                        readonly enum: readonly ["opened", "closed", "closedEarly", "cancelled"];
+                    };
+                    readonly at: {
+                        readonly type: "string";
+                        readonly format: "date-time";
+                    };
+                };
+            }, {
+                readonly title: "ResultEntry";
+                readonly type: "object";
+                readonly additionalProperties: false;
+                readonly required: readonly ["kind", "result"];
+                readonly properties: {
+                    readonly kind: {
+                        readonly const: "result";
+                    };
+                    readonly result: {
+                        readonly $ref: "#/$defs/ElectionResult";
+                    };
+                };
+            }, {
+                readonly title: "EncryptedCastEntry";
+                readonly type: "object";
+                readonly additionalProperties: false;
+                readonly required: readonly ["kind", "cast"];
+                readonly properties: {
+                    readonly kind: {
+                        readonly const: "encryptedCast";
+                    };
+                    readonly cast: {
+                        readonly $ref: "#/$defs/EncryptedCast";
+                    };
+                };
+            }, {
+                readonly title: "TransportKeyEntry";
+                readonly type: "object";
+                readonly additionalProperties: false;
+                readonly required: readonly ["kind", "transportKey"];
+                readonly properties: {
+                    readonly kind: {
+                        readonly const: "transportKey";
+                    };
+                    readonly transportKey: {
+                        readonly $ref: "#/$defs/TransportKey";
+                    };
+                };
+            }, {
+                readonly title: "DealingEntry";
+                readonly type: "object";
+                readonly additionalProperties: false;
+                readonly required: readonly ["kind", "dealing"];
+                readonly properties: {
+                    readonly kind: {
+                        readonly const: "dealing";
+                    };
+                    readonly dealing: {
+                        readonly $ref: "#/$defs/Dealing";
+                    };
+                };
+            }, {
+                readonly title: "ConfirmationEntry";
+                readonly type: "object";
+                readonly additionalProperties: false;
+                readonly required: readonly ["kind", "trustee", "complaints"];
+                readonly properties: {
+                    readonly kind: {
+                        readonly const: "confirmation";
+                    };
+                    readonly trustee: {
+                        readonly $ref: "#/$defs/TrusteeIndex";
+                    };
+                    readonly complaints: {
+                        readonly type: "array";
+                        readonly maxItems: 64;
+                        readonly items: {
+                            readonly $ref: "#/$defs/TrusteeIndex";
+                        };
+                    };
+                };
+            }, {
+                readonly title: "JustificationEntry";
+                readonly type: "object";
+                readonly additionalProperties: false;
+                readonly required: readonly ["kind", "dealer", "recipient", "share"];
+                readonly properties: {
+                    readonly kind: {
+                        readonly const: "justification";
+                    };
+                    readonly dealer: {
+                        readonly $ref: "#/$defs/TrusteeIndex";
+                    };
+                    readonly recipient: {
+                        readonly $ref: "#/$defs/TrusteeIndex";
+                    };
+                    readonly share: {
+                        readonly $ref: "#/$defs/GroupScalar";
+                    };
+                };
+            }, {
+                readonly title: "ElectionKeyEntry";
+                readonly type: "object";
+                readonly additionalProperties: false;
+                readonly required: readonly ["kind", "electionKey"];
+                readonly properties: {
+                    readonly kind: {
+                        readonly const: "electionKey";
+                    };
+                    readonly electionKey: {
+                        readonly $ref: "#/$defs/ElectionKey";
+                    };
+                };
+            }, {
+                readonly title: "PartialDecryptionsEntry";
+                readonly type: "object";
+                readonly additionalProperties: false;
+                readonly required: readonly ["kind", "trustee", "partials"];
+                readonly properties: {
+                    readonly kind: {
+                        readonly const: "partials";
+                    };
+                    readonly trustee: {
+                        readonly $ref: "#/$defs/TrusteeIndex";
+                    };
+                    readonly partials: {
+                        readonly type: "array";
+                        readonly minItems: 1;
+                        readonly maxItems: 100000;
+                        readonly items: {
+                            readonly $ref: "#/$defs/PartialDecryption";
+                        };
+                    };
+                };
+            }, {
+                readonly title: "UnsealedEntry";
+                readonly type: "object";
+                readonly additionalProperties: false;
+                readonly required: readonly ["kind", "leafIndex", "ballot"];
+                readonly properties: {
+                    readonly kind: {
+                        readonly const: "unsealed";
+                    };
+                    readonly leafIndex: {
+                        readonly type: "integer";
+                        readonly minimum: 0;
+                    };
+                    readonly ballot: {
+                        readonly $ref: "#/$defs/Ballot";
+                    };
+                };
+            }, {
+                readonly title: "SpoiledEntry";
+                readonly description: "A sealed cast that did not open, or opened to no valid ballot: not counted (CONVENTIONS §9.7).";
+                readonly type: "object";
+                readonly additionalProperties: false;
+                readonly required: readonly ["kind", "leafIndex"];
+                readonly properties: {
+                    readonly kind: {
+                        readonly const: "spoiled";
+                    };
+                    readonly leafIndex: {
+                        readonly type: "integer";
+                        readonly minimum: 0;
+                    };
+                };
+            }];
+        };
+        readonly Ballot: {
+            readonly title: "Ballot";
+            readonly description: "An open ballot: one answer per question of the manifest, in any order. The bytes a cast's proof binds are the RFC 8785 (JCS) canonicalization of this object as received.";
+            readonly type: "object";
+            readonly additionalProperties: false;
+            readonly required: readonly ["electionId", "manifestDigest", "answers"];
+            readonly properties: {
                 readonly electionId: {
                     readonly $ref: "#/$defs/ElectionId";
                 };
@@ -770,103 +1206,1414 @@ export declare const RESPONSE_PAYLOAD_SCHEMA: {
                     };
                 };
             };
-        };
-        readonly Answer: {
-            readonly title: "Answer";
-            readonly description: "The answer to one question. Exactly one member besides `question` is present, matching the question's type, or `abstain` for an optional question left unanswered.";
-            readonly type: "object";
-            readonly additionalProperties: false;
-            readonly required: readonly ["question"];
-            readonly minProperties: 2;
-            readonly maxProperties: 2;
-            readonly properties: {
-                readonly question: {
-                    readonly $ref: "#/$defs/Key";
-                };
-                readonly choice: {
-                    readonly type: "array";
-                    readonly items: {
+        };
+        readonly Answer: {
+            readonly title: "Answer";
+            readonly description: "The answer to one question. Exactly one member besides `question` is present, matching the question's type, or `abstain` for an optional question left unanswered.";
+            readonly type: "object";
+            readonly additionalProperties: false;
+            readonly required: readonly ["question"];
+            readonly minProperties: 2;
+            readonly maxProperties: 2;
+            readonly properties: {
+                readonly question: {
+                    readonly $ref: "#/$defs/Key";
+                };
+                readonly choice: {
+                    readonly type: "array";
+                    readonly items: {
+                        readonly $ref: "#/$defs/Key";
+                    };
+                    readonly uniqueItems: true;
+                };
+                readonly ranking: {
+                    readonly type: "array";
+                    readonly items: {
+                        readonly $ref: "#/$defs/Key";
+                    };
+                    readonly uniqueItems: true;
+                };
+                readonly scores: {
+                    readonly type: "object";
+                    readonly propertyNames: {
+                        readonly $ref: "#/$defs/Key";
+                    };
+                    readonly additionalProperties: {
+                        readonly type: "integer";
+                    };
+                };
+                readonly text: {
+                    readonly type: "string";
+                    readonly maxLength: 4096;
+                };
+                readonly abstain: {
+                    readonly const: true;
+                };
+            };
+        };
+        readonly Key: {
+            readonly title: "Key";
+            readonly description: "A question or option key, unique within its manifest or question.";
+            readonly type: "string";
+            readonly pattern: "^[A-Za-z0-9._-]{1,64}$";
+        };
+        readonly ElectionId: {
+            readonly title: "ElectionId";
+            readonly description: "An election's identifier, unique within its community. A closed alphabet: it appears in the ticket class label `voter/<electionId>` and is framed into every hash a cast is bound to.";
+            readonly type: "string";
+            readonly pattern: "^[A-Za-z0-9._-]{1,128}$";
+        };
+        readonly DigestMultibase: {
+            readonly title: "DigestMultibase";
+            readonly description: "A cryptographic digest as a multibase-encoded multihash — the encoding the W3C Verifiable Credentials Data Model 2.0 defines for `digestMultibase`, and the one `did:webvh` uses for its SCID and entry hashes.\n\nMultihash carries the hash algorithm in-band, so the value is self-describing and the wire format survives an algorithm change without a schema revision; multibase does the same for the base encoding, so a verifier never infers base58 from base64url by context. A bare hex string or a `sha-256:`-style prefix hard-codes one algorithm into the wire contract and is non-conforming here.\n\nThis definition constrains the *encoding only*. What the digest is computed over is stated by each referencing field, because it differs legitimately: a digest over a JSON document is taken over its RFC 8785 (JCS) canonicalization, while a digest over an opaque artifact is taken over its bytes. A field whose input is a JSON document and which does not name a canonicalization is not reproducible.\n\nRestricted to the two multibase headers W3C Controlled Identifiers 1.0 §2.4 normatively requires — `z` (base58btc) and `u` (base64url-no-pad). CID permits others but states that \"interoperability is not guaranteed between implementations using such values\", and a registry whose purpose is interoperability should not mint digests a conforming verifier may be unable to read. The alphabets are enforced rather than assumed: base58btc excludes 0, O, I and l, and an earlier permissive pattern let three published examples carry digests that were not valid base58 at all. base58btc is RECOMMENDED, for consistency with `did:key` and `did:webvh`.";
+            readonly type: "string";
+            readonly minLength: 16;
+            readonly pattern: "^(z[1-9A-HJ-NP-Za-km-z]+|u[A-Za-z0-9_-]+)$";
+            readonly examples: readonly ["zQmbWqxBEKC3P8tqsKc98xmWNzrzDtRLMiMPL8wBuTGsMnR"];
+        };
+        readonly PartialDecryption: {
+            readonly title: "PartialDecryption";
+            readonly description: "Trustee `trustee`'s share of one decryption, `d = x_j·a`, with a Chaum–Pedersen proof against its verification key (CONVENTIONS §9.7).";
+            readonly type: "object";
+            readonly additionalProperties: false;
+            readonly required: readonly ["target", "d", "proof"];
+            readonly properties: {
+                readonly target: {
+                    readonly $ref: "#/$defs/DecryptionTarget";
+                };
+                readonly d: {
+                    readonly $ref: "#/$defs/GroupElement";
+                };
+                readonly proof: {
+                    readonly $ref: "#/$defs/SigmaProof";
+                };
+            };
+        };
+        readonly SigmaProof: {
+            readonly title: "SigmaProof";
+            readonly description: "A non-interactive sigma proof as its challenge and response `(c, z)` (Schnorr or Chaum–Pedersen; CONVENTIONS §9.3).";
+            readonly type: "object";
+            readonly additionalProperties: false;
+            readonly required: readonly ["c", "z"];
+            readonly properties: {
+                readonly c: {
+                    readonly $ref: "#/$defs/GroupScalar";
+                };
+                readonly z: {
+                    readonly $ref: "#/$defs/GroupScalar";
+                };
+            };
+        };
+        readonly GroupScalar: {
+            readonly title: "GroupScalar";
+            readonly description: "A scalar mod the Ristretto group order: 32 canonical little-endian bytes, multibase base58btc (CONVENTIONS §9.1).";
+            readonly type: "string";
+            readonly minLength: 2;
+            readonly maxLength: 64;
+            readonly pattern: "^z[1-9A-HJ-NP-Za-km-z]+$";
+        };
+        readonly GroupElement: {
+            readonly title: "GroupElement";
+            readonly description: "A Ristretto group element: its 32-byte compression, multibase base58btc. Never the identity (CONVENTIONS §9.1).";
+            readonly type: "string";
+            readonly minLength: 2;
+            readonly maxLength: 64;
+            readonly pattern: "^z[1-9A-HJ-NP-Za-km-z]+$";
+        };
+        readonly DecryptionTarget: {
+            readonly title: "DecryptionTarget";
+            readonly description: "What a partial decryption decrypts: the sealed cast at a board leaf, or the total of one option of one question.";
+            readonly type: "object";
+            readonly additionalProperties: false;
+            readonly required: readonly ["ciphertext"];
+            readonly properties: {
+                readonly leafIndex: {
+                    readonly type: "integer";
+                    readonly minimum: 0;
+                    readonly description: "A sealed cast's board leaf.";
+                };
+                readonly question: {
+                    readonly $ref: "#/$defs/Key";
+                };
+                readonly option: {
+                    readonly $ref: "#/$defs/Key";
+                };
+                readonly ciphertext: {
+                    readonly $ref: "#/$defs/ElGamalCiphertext";
+                };
+            };
+            readonly oneOf: readonly [{
+                readonly required: readonly ["leafIndex"];
+            }, {
+                readonly required: readonly ["question", "option"];
+            }];
+        };
+        readonly ElGamalCiphertext: {
+            readonly title: "ElGamalCiphertext";
+            readonly description: "`(a, b) = (r·G, M + r·Y)` under the election key `Y` (CONVENTIONS §9.2).";
+            readonly type: "object";
+            readonly additionalProperties: false;
+            readonly required: readonly ["a", "b"];
+            readonly properties: {
+                readonly a: {
+                    readonly $ref: "#/$defs/GroupElement";
+                };
+                readonly b: {
+                    readonly $ref: "#/$defs/GroupElement";
+                };
+            };
+        };
+        readonly TrusteeIndex: {
+            readonly title: "TrusteeIndex";
+            readonly description: "A trustee's index: its position in the manifest's `trustees.dids`, counting from 1.";
+            readonly type: "integer";
+            readonly minimum: 1;
+            readonly maximum: 64;
+        };
+        readonly ElectionKey: {
+            readonly title: "ElectionKey";
+            readonly description: "The election key and each trustee's public verification key, computed from the qualified dealings (CONVENTIONS §9.6). Anyone can recompute it from the board.";
+            readonly type: "object";
+            readonly additionalProperties: false;
+            readonly required: readonly ["key", "qualified", "verification"];
+            readonly properties: {
+                readonly key: {
+                    readonly $ref: "#/$defs/GroupElement";
+                };
+                readonly qualified: {
+                    readonly type: "array";
+                    readonly minItems: 1;
+                    readonly maxItems: 64;
+                    readonly items: {
+                        readonly $ref: "#/$defs/TrusteeIndex";
+                    };
+                    readonly description: "The dealers whose dealings the key is formed from.";
+                };
+                readonly verification: {
+                    readonly type: "array";
+                    readonly minItems: 2;
+                    readonly maxItems: 64;
+                    readonly items: {
+                        readonly type: "object";
+                        readonly additionalProperties: false;
+                        readonly required: readonly ["trustee", "key"];
+                        readonly properties: {
+                            readonly trustee: {
+                                readonly $ref: "#/$defs/TrusteeIndex";
+                            };
+                            readonly key: {
+                                readonly $ref: "#/$defs/GroupElement";
+                            };
+                        };
+                    };
+                };
+            };
+        };
+        readonly Dealing: {
+            readonly title: "Dealing";
+            readonly description: "A trustee's contribution to the election key: Feldman commitments to its polynomial, a proof of knowledge of the constant term, and one share per trustee sealed to that trustee's transport key (CONVENTIONS §9.6).";
+            readonly type: "object";
+            readonly additionalProperties: false;
+            readonly required: readonly ["dealer", "commitments", "pok", "shares"];
+            readonly properties: {
+                readonly dealer: {
+                    readonly $ref: "#/$defs/TrusteeIndex";
+                };
+                readonly commitments: {
+                    readonly type: "array";
+                    readonly minItems: 2;
+                    readonly maxItems: 64;
+                    readonly items: {
+                        readonly $ref: "#/$defs/GroupElement";
+                    };
+                };
+                readonly pok: {
+                    readonly $ref: "#/$defs/SigmaProof";
+                };
+                readonly shares: {
+                    readonly type: "array";
+                    readonly minItems: 2;
+                    readonly maxItems: 64;
+                    readonly items: {
+                        readonly $ref: "#/$defs/SealedShare";
+                    };
+                };
+            };
+        };
+        readonly SealedShare: {
+            readonly title: "SealedShare";
+            readonly type: "object";
+            readonly additionalProperties: false;
+            readonly required: readonly ["recipient", "share"];
+            readonly properties: {
+                readonly recipient: {
+                    readonly $ref: "#/$defs/TrusteeIndex";
+                };
+                readonly share: {
+                    readonly $ref: "#/$defs/SealedPayload";
+                };
+            };
+        };
+        readonly SealedPayload: {
+            readonly title: "SealedPayload";
+            readonly description: "Bytes sealed to a key: a random group element encrypted as `kem`, and the bytes under ChaCha20-Poly1305 with a key derived from it, multibase base58btc (CONVENTIONS §9.4).";
+            readonly type: "object";
+            readonly additionalProperties: false;
+            readonly required: readonly ["kem", "body"];
+            readonly properties: {
+                readonly kem: {
+                    readonly $ref: "#/$defs/ElGamalCiphertext";
+                };
+                readonly body: {
+                    readonly type: "string";
+                    readonly minLength: 2;
+                    readonly maxLength: 131072;
+                    readonly pattern: "^z[1-9A-HJ-NP-Za-km-z]+$";
+                };
+            };
+        };
+        readonly TransportKey: {
+            readonly title: "TransportKey";
+            readonly description: "The group element a trustee's shares are sealed to, with a Schnorr proof of knowledge of its discrete log (CONVENTIONS §9.6).";
+            readonly type: "object";
+            readonly additionalProperties: false;
+            readonly required: readonly ["trustee", "key", "pok"];
+            readonly properties: {
+                readonly trustee: {
+                    readonly $ref: "#/$defs/TrusteeIndex";
+                };
+                readonly key: {
+                    readonly $ref: "#/$defs/GroupElement";
+                };
+                readonly pok: {
+                    readonly $ref: "#/$defs/SigmaProof";
+                };
+            };
+        };
+        readonly EncryptedCast: {
+            readonly title: "EncryptedCast";
+            readonly description: "A cast of a sealed or tallied-encrypted election: exactly one of `sealed` (the Ballot's JCS bytes sealed to the election key) or `encrypted`, with the tag and the attestation over the JCS bytes of whichever is present (CONVENTIONS §3.6, §9.5).";
+            readonly type: "object";
+            readonly additionalProperties: false;
+            readonly required: readonly ["tag", "attestation"];
+            readonly properties: {
+                readonly sealed: {
+                    readonly $ref: "#/$defs/SealedPayload";
+                };
+                readonly encrypted: {
+                    readonly $ref: "#/$defs/EncryptedBallot";
+                };
+                readonly tag: {
+                    readonly $ref: "#/$defs/Multibase";
+                };
+                readonly attestation: {
+                    readonly $ref: "#/$defs/Multibase";
+                };
+            };
+            readonly oneOf: readonly [{
+                readonly required: readonly ["sealed"];
+            }, {
+                readonly required: readonly ["encrypted"];
+            }];
+        };
+        readonly Multibase: {
+            readonly title: "Multibase";
+            readonly description: "A binary value, multibase base58btc over the suite's canonical (compressed) encoding.";
+            readonly type: "string";
+            readonly maxLength: 16384;
+            readonly pattern: "^z[1-9A-HJ-NP-Za-km-z]+$";
+        };
+        readonly EncryptedBallot: {
+            readonly title: "EncryptedBallot";
+            readonly description: "A tallied-encrypted ballot: one EncryptedQuestion per manifest question, in the manifest's order. Never decrypted (VTI-VOT-064).";
+            readonly type: "object";
+            readonly additionalProperties: false;
+            readonly required: readonly ["electionId", "manifestDigest", "questions"];
+            readonly properties: {
+                readonly electionId: {
+                    readonly $ref: "#/$defs/ElectionId";
+                };
+                readonly manifestDigest: {
+                    readonly $ref: "#/$defs/DigestMultibase";
+                };
+                readonly questions: {
+                    readonly type: "array";
+                    readonly minItems: 1;
+                    readonly maxItems: 64;
+                    readonly items: {
+                        readonly $ref: "#/$defs/EncryptedQuestion";
+                    };
+                };
+            };
+        };
+        readonly EncryptedQuestion: {
+            readonly title: "EncryptedQuestion";
+            readonly description: "One choice question of a tallied-encrypted ballot: per option, in the manifest's order, an encryption of 0 or 1 with its proof; and a proof that the selections sum to a count the question admits (CONVENTIONS §9.5).";
+            readonly type: "object";
+            readonly additionalProperties: false;
+            readonly required: readonly ["question", "options", "sumProof"];
+            readonly properties: {
+                readonly question: {
+                    readonly $ref: "#/$defs/Key";
+                };
+                readonly options: {
+                    readonly type: "array";
+                    readonly minItems: 1;
+                    readonly maxItems: 64;
+                    readonly items: {
+                        readonly $ref: "#/$defs/EncryptedOption";
+                    };
+                };
+                readonly sumProof: {
+                    readonly $ref: "#/$defs/DisjunctiveProof";
+                };
+            };
+        };
+        readonly DisjunctiveProof: {
+            readonly title: "DisjunctiveProof";
+            readonly description: "A disjunctive proof that a ciphertext encrypts one value of a public list: one `(c, z)` per value, in the list's order (CONVENTIONS §9.3).";
+            readonly type: "array";
+            readonly minItems: 1;
+            readonly maxItems: 65;
+            readonly items: {
+                readonly $ref: "#/$defs/SigmaProof";
+            };
+        };
+        readonly EncryptedOption: {
+            readonly title: "EncryptedOption";
+            readonly type: "object";
+            readonly additionalProperties: false;
+            readonly required: readonly ["ciphertext", "proof"];
+            readonly properties: {
+                readonly ciphertext: {
+                    readonly $ref: "#/$defs/ElGamalCiphertext";
+                };
+                readonly proof: {
+                    readonly $ref: "#/$defs/DisjunctiveProof";
+                };
+            };
+        };
+        readonly ElectionResult: {
+            readonly title: "ElectionResult";
+            readonly description: "An election's result, computable by anyone who can read its board from the board and the registration alone (VTI-VOT-070).";
+            readonly type: "object";
+            readonly additionalProperties: false;
+            readonly required: readonly ["electionId", "manifestDigest", "ballotsCounted", "questions", "head"];
+            readonly properties: {
+                readonly electionId: {
+                    readonly $ref: "#/$defs/ElectionId";
+                };
+                readonly manifestDigest: {
+                    readonly $ref: "#/$defs/DigestMultibase";
+                };
+                readonly ballotsCounted: {
+                    readonly type: "integer";
+                    readonly minimum: 0;
+                };
+                readonly questions: {
+                    readonly type: "array";
+                    readonly items: {
+                        readonly $ref: "#/$defs/QuestionResult";
+                    };
+                };
+                readonly head: {
+                    readonly $ref: "#/$defs/BoardHead";
+                    readonly description: "The head of the board as it stood at close: the result counts exactly its entries.";
+                };
+            };
+        };
+        readonly BoardHead: {
+            readonly title: "BoardHead";
+            readonly description: "A board's tree head (RFC 9162 §2.1). A head is signed by being carried in a document the ballot box signs; whoever keeps a head keeps that whole document.";
+            readonly type: "object";
+            readonly additionalProperties: false;
+            readonly required: readonly ["electionId", "treeSize", "rootHash", "issuedAt"];
+            readonly properties: {
+                readonly electionId: {
+                    readonly $ref: "#/$defs/ElectionId";
+                };
+                readonly treeSize: {
+                    readonly type: "integer";
+                    readonly minimum: 0;
+                };
+                readonly rootHash: {
+                    readonly $ref: "#/$defs/DigestMultibase";
+                    readonly description: "The RFC 9162 Merkle tree hash (SHA-256) of the first `treeSize` entries, as a multihash.";
+                };
+                readonly issuedAt: {
+                    readonly type: "string";
+                    readonly format: "date-time";
+                };
+            };
+        };
+        readonly QuestionResult: {
+            readonly title: "QuestionResult";
+            readonly description: "One question's totals. `choice`: selections per option. `ranking`: per option, how many ballots placed it at each position (index 0 = first). `score`: per option, the sum and the number of ballots that scored it. `text`: the answers, in board order, withheld (`withheld: true`) below the manifest's `textReleaseThreshold`. `abstained` counts ballots that left the question unanswered.";
+            readonly type: "object";
+            readonly additionalProperties: false;
+            readonly required: readonly ["question", "abstained"];
+            readonly properties: {
+                readonly question: {
+                    readonly $ref: "#/$defs/Key";
+                };
+                readonly abstained: {
+                    readonly type: "integer";
+                    readonly minimum: 0;
+                };
+                readonly choice: {
+                    readonly type: "object";
+                    readonly propertyNames: {
+                        readonly $ref: "#/$defs/Key";
+                    };
+                    readonly additionalProperties: {
+                        readonly type: "integer";
+                        readonly minimum: 0;
+                    };
+                };
+                readonly ranking: {
+                    readonly type: "object";
+                    readonly propertyNames: {
+                        readonly $ref: "#/$defs/Key";
+                    };
+                    readonly additionalProperties: {
+                        readonly type: "array";
+                        readonly items: {
+                            readonly type: "integer";
+                            readonly minimum: 0;
+                        };
+                    };
+                };
+                readonly score: {
+                    readonly type: "object";
+                    readonly propertyNames: {
+                        readonly $ref: "#/$defs/Key";
+                    };
+                    readonly additionalProperties: {
+                        readonly type: "object";
+                        readonly additionalProperties: false;
+                        readonly required: readonly ["sum", "count"];
+                        readonly properties: {
+                            readonly sum: {
+                                readonly type: "integer";
+                            };
+                            readonly count: {
+                                readonly type: "integer";
+                                readonly minimum: 0;
+                            };
+                        };
+                    };
+                };
+                readonly text: {
+                    readonly type: "array";
+                    readonly items: {
+                        readonly type: "string";
+                        readonly maxLength: 4096;
+                    };
+                };
+                readonly withheld: {
+                    readonly type: "boolean";
+                };
+            };
+        };
+        readonly Cast: {
+            readonly title: "Cast";
+            readonly description: "A ballot and the PCS attestation that admits it (VTI-VOT-030). `attestation` is the suite's canonical encoding of the attestation made for the election point with the ballot context bound in (CONVENTIONS §3); `tag` repeats its tag so a ballot box can refuse a duplicate before the pairing check.";
+            readonly type: "object";
+            readonly additionalProperties: false;
+            readonly required: readonly ["ballot", "tag", "attestation"];
+            readonly properties: {
+                readonly ballot: {
+                    readonly $ref: "#/$defs/Ballot";
+                };
+                readonly tag: {
+                    readonly $ref: "#/$defs/Multibase";
+                };
+                readonly attestation: {
+                    readonly $ref: "#/$defs/Multibase";
+                };
+            };
+        };
+    };
+};
+/**
+ * SPEC.md §7.2 policy for the request variant, from this specification's
+ * front matter. Pass to `consumeInbound` — items 5b, 7 and 8 are
+ * per-specification and cannot be derived from the document alone, and
+ * item 2 needs the schema this carries.
+ */
+export declare const SPEC: {
+    readonly typeUri: "https://trusttasks.org/spec/voting/board/read/0.1";
+    readonly isBearer: false;
+    readonly isProofRequired: false;
+    readonly isRecipientRequired: true;
+    readonly isIssuedAtRequired: false;
+    readonly payloadSchema: {
+        readonly $schema: "https://json-schema.org/draft/2020-12/schema";
+        readonly $id: "https://trusttasks.org/spec/voting/board/read/0.1";
+        readonly title: "Voting — Board Read — payload";
+        readonly description: "Reads a range of an election board's entries, against the current head or against an earlier tree size.";
+        readonly type: "object";
+        readonly additionalProperties: false;
+        readonly required: readonly ["community", "electionId", "from", "limit"];
+        readonly properties: {
+            readonly community: {
+                readonly type: "string";
+                readonly minLength: 1;
+                readonly maxLength: 2048;
+                readonly description: "The community's DID.";
+            };
+            readonly electionId: {
+                readonly $ref: "#/$defs/ElectionId";
+            };
+            readonly from: {
+                readonly type: "integer";
+                readonly minimum: 0;
+                readonly description: "The index of the first entry to return.";
+            };
+            readonly limit: {
+                readonly type: "integer";
+                readonly minimum: 1;
+                readonly maximum: 1000;
+                readonly description: "The most entries to return.";
+            };
+            readonly treeSize: {
+                readonly type: "integer";
+                readonly minimum: 0;
+                readonly description: "Read against the board as it stood at this size — the size of a head the reader holds. At most the current size. Absent: the current size.";
+            };
+            readonly ext: {
+                readonly $ref: "#/$defs/Ext";
+            };
+        };
+        readonly $defs: {
+            readonly Response: {
+                readonly $anchor: "response";
+                readonly title: "Voting — Board Read — response payload";
+                readonly type: "object";
+                readonly additionalProperties: false;
+                readonly required: readonly ["treeSize", "entries"];
+                readonly properties: {
+                    readonly treeSize: {
+                        readonly type: "integer";
+                        readonly minimum: 0;
+                        readonly description: "The tree size the page was read against. No entry at or beyond it is returned.";
+                    };
+                    readonly entries: {
+                        readonly type: "array";
+                        readonly maxItems: 1000;
+                        readonly items: {
+                            readonly type: "object";
+                            readonly additionalProperties: false;
+                            readonly required: readonly ["index", "entry"];
+                            readonly properties: {
+                                readonly index: {
+                                    readonly type: "integer";
+                                    readonly minimum: 0;
+                                };
+                                readonly entry: {
+                                    readonly $ref: "#/$defs/BoardEntry";
+                                };
+                            };
+                        };
+                        readonly description: "Consecutive entries from `from`, in board order.";
+                    };
+                    readonly next: {
+                        readonly type: "integer";
+                        readonly minimum: 1;
+                        readonly description: "The `from` of the next page. Absent when the page reaches `treeSize`.";
+                    };
+                    readonly ext: {
+                        readonly $ref: "#/$defs/Ext";
+                    };
+                };
+            };
+            readonly Ext: {
+                readonly title: "Ext";
+                readonly description: "Vendor-namespaced extension object per SPEC.md §4.5.1. Each immediate key MUST be a reverse-DNS namespace; structure under each namespace is opaque to the framework.";
+                readonly type: "object";
+                readonly minProperties: 1;
+                readonly additionalProperties: true;
+                readonly propertyNames: {
+                    readonly pattern: "^[a-z][a-z0-9-]*(\\.[a-z0-9-]+)+$";
+                };
+            };
+            readonly BoardEntry: {
+                readonly title: "BoardEntry";
+                readonly description: "One leaf of a board. A leaf's hash is the RFC 9162 leaf hash of the JCS canonicalization of this object. Entries carry no time of arrival: the order is the board's, and a timestamp would hand anyone who reads the board the timing the registrar's log would need to pair a ticket with its cast.";
+                readonly oneOf: readonly [{
+                    readonly title: "CastEntry";
+                    readonly type: "object";
+                    readonly additionalProperties: false;
+                    readonly required: readonly ["kind", "cast"];
+                    readonly properties: {
+                        readonly kind: {
+                            readonly const: "cast";
+                        };
+                        readonly cast: {
+                            readonly $ref: "#/$defs/Cast";
+                        };
+                    };
+                }, {
+                    readonly title: "ReplacementEntry";
+                    readonly description: "The cast at `replaces` is no longer counted: a later cast under the same tag is.";
+                    readonly type: "object";
+                    readonly additionalProperties: false;
+                    readonly required: readonly ["kind", "tag", "replaces", "by"];
+                    readonly properties: {
+                        readonly kind: {
+                            readonly const: "replaced";
+                        };
+                        readonly tag: {
+                            readonly $ref: "#/$defs/Multibase";
+                        };
+                        readonly replaces: {
+                            readonly type: "integer";
+                            readonly minimum: 0;
+                        };
+                        readonly by: {
+                            readonly type: "integer";
+                            readonly minimum: 0;
+                        };
+                    };
+                }, {
+                    readonly title: "LifecycleEntry";
+                    readonly type: "object";
+                    readonly additionalProperties: false;
+                    readonly required: readonly ["kind", "at"];
+                    readonly properties: {
+                        readonly kind: {
+                            readonly enum: readonly ["opened", "closed", "closedEarly", "cancelled"];
+                        };
+                        readonly at: {
+                            readonly type: "string";
+                            readonly format: "date-time";
+                        };
+                    };
+                }, {
+                    readonly title: "ResultEntry";
+                    readonly type: "object";
+                    readonly additionalProperties: false;
+                    readonly required: readonly ["kind", "result"];
+                    readonly properties: {
+                        readonly kind: {
+                            readonly const: "result";
+                        };
+                        readonly result: {
+                            readonly $ref: "#/$defs/ElectionResult";
+                        };
+                    };
+                }, {
+                    readonly title: "EncryptedCastEntry";
+                    readonly type: "object";
+                    readonly additionalProperties: false;
+                    readonly required: readonly ["kind", "cast"];
+                    readonly properties: {
+                        readonly kind: {
+                            readonly const: "encryptedCast";
+                        };
+                        readonly cast: {
+                            readonly $ref: "#/$defs/EncryptedCast";
+                        };
+                    };
+                }, {
+                    readonly title: "TransportKeyEntry";
+                    readonly type: "object";
+                    readonly additionalProperties: false;
+                    readonly required: readonly ["kind", "transportKey"];
+                    readonly properties: {
+                        readonly kind: {
+                            readonly const: "transportKey";
+                        };
+                        readonly transportKey: {
+                            readonly $ref: "#/$defs/TransportKey";
+                        };
+                    };
+                }, {
+                    readonly title: "DealingEntry";
+                    readonly type: "object";
+                    readonly additionalProperties: false;
+                    readonly required: readonly ["kind", "dealing"];
+                    readonly properties: {
+                        readonly kind: {
+                            readonly const: "dealing";
+                        };
+                        readonly dealing: {
+                            readonly $ref: "#/$defs/Dealing";
+                        };
+                    };
+                }, {
+                    readonly title: "ConfirmationEntry";
+                    readonly type: "object";
+                    readonly additionalProperties: false;
+                    readonly required: readonly ["kind", "trustee", "complaints"];
+                    readonly properties: {
+                        readonly kind: {
+                            readonly const: "confirmation";
+                        };
+                        readonly trustee: {
+                            readonly $ref: "#/$defs/TrusteeIndex";
+                        };
+                        readonly complaints: {
+                            readonly type: "array";
+                            readonly maxItems: 64;
+                            readonly items: {
+                                readonly $ref: "#/$defs/TrusteeIndex";
+                            };
+                        };
+                    };
+                }, {
+                    readonly title: "JustificationEntry";
+                    readonly type: "object";
+                    readonly additionalProperties: false;
+                    readonly required: readonly ["kind", "dealer", "recipient", "share"];
+                    readonly properties: {
+                        readonly kind: {
+                            readonly const: "justification";
+                        };
+                        readonly dealer: {
+                            readonly $ref: "#/$defs/TrusteeIndex";
+                        };
+                        readonly recipient: {
+                            readonly $ref: "#/$defs/TrusteeIndex";
+                        };
+                        readonly share: {
+                            readonly $ref: "#/$defs/GroupScalar";
+                        };
+                    };
+                }, {
+                    readonly title: "ElectionKeyEntry";
+                    readonly type: "object";
+                    readonly additionalProperties: false;
+                    readonly required: readonly ["kind", "electionKey"];
+                    readonly properties: {
+                        readonly kind: {
+                            readonly const: "electionKey";
+                        };
+                        readonly electionKey: {
+                            readonly $ref: "#/$defs/ElectionKey";
+                        };
+                    };
+                }, {
+                    readonly title: "PartialDecryptionsEntry";
+                    readonly type: "object";
+                    readonly additionalProperties: false;
+                    readonly required: readonly ["kind", "trustee", "partials"];
+                    readonly properties: {
+                        readonly kind: {
+                            readonly const: "partials";
+                        };
+                        readonly trustee: {
+                            readonly $ref: "#/$defs/TrusteeIndex";
+                        };
+                        readonly partials: {
+                            readonly type: "array";
+                            readonly minItems: 1;
+                            readonly maxItems: 100000;
+                            readonly items: {
+                                readonly $ref: "#/$defs/PartialDecryption";
+                            };
+                        };
+                    };
+                }, {
+                    readonly title: "UnsealedEntry";
+                    readonly type: "object";
+                    readonly additionalProperties: false;
+                    readonly required: readonly ["kind", "leafIndex", "ballot"];
+                    readonly properties: {
+                        readonly kind: {
+                            readonly const: "unsealed";
+                        };
+                        readonly leafIndex: {
+                            readonly type: "integer";
+                            readonly minimum: 0;
+                        };
+                        readonly ballot: {
+                            readonly $ref: "#/$defs/Ballot";
+                        };
+                    };
+                }, {
+                    readonly title: "SpoiledEntry";
+                    readonly description: "A sealed cast that did not open, or opened to no valid ballot: not counted (CONVENTIONS §9.7).";
+                    readonly type: "object";
+                    readonly additionalProperties: false;
+                    readonly required: readonly ["kind", "leafIndex"];
+                    readonly properties: {
+                        readonly kind: {
+                            readonly const: "spoiled";
+                        };
+                        readonly leafIndex: {
+                            readonly type: "integer";
+                            readonly minimum: 0;
+                        };
+                    };
+                }];
+            };
+            readonly Ballot: {
+                readonly title: "Ballot";
+                readonly description: "An open ballot: one answer per question of the manifest, in any order. The bytes a cast's proof binds are the RFC 8785 (JCS) canonicalization of this object as received.";
+                readonly type: "object";
+                readonly additionalProperties: false;
+                readonly required: readonly ["electionId", "manifestDigest", "answers"];
+                readonly properties: {
+                    readonly electionId: {
+                        readonly $ref: "#/$defs/ElectionId";
+                    };
+                    readonly manifestDigest: {
+                        readonly $ref: "#/$defs/DigestMultibase";
+                    };
+                    readonly answers: {
+                        readonly type: "array";
+                        readonly minItems: 1;
+                        readonly maxItems: 128;
+                        readonly items: {
+                            readonly $ref: "#/$defs/Answer";
+                        };
+                    };
+                };
+            };
+            readonly Answer: {
+                readonly title: "Answer";
+                readonly description: "The answer to one question. Exactly one member besides `question` is present, matching the question's type, or `abstain` for an optional question left unanswered.";
+                readonly type: "object";
+                readonly additionalProperties: false;
+                readonly required: readonly ["question"];
+                readonly minProperties: 2;
+                readonly maxProperties: 2;
+                readonly properties: {
+                    readonly question: {
+                        readonly $ref: "#/$defs/Key";
+                    };
+                    readonly choice: {
+                        readonly type: "array";
+                        readonly items: {
+                            readonly $ref: "#/$defs/Key";
+                        };
+                        readonly uniqueItems: true;
+                    };
+                    readonly ranking: {
+                        readonly type: "array";
+                        readonly items: {
+                            readonly $ref: "#/$defs/Key";
+                        };
+                        readonly uniqueItems: true;
+                    };
+                    readonly scores: {
+                        readonly type: "object";
+                        readonly propertyNames: {
+                            readonly $ref: "#/$defs/Key";
+                        };
+                        readonly additionalProperties: {
+                            readonly type: "integer";
+                        };
+                    };
+                    readonly text: {
+                        readonly type: "string";
+                        readonly maxLength: 4096;
+                    };
+                    readonly abstain: {
+                        readonly const: true;
+                    };
+                };
+            };
+            readonly Key: {
+                readonly title: "Key";
+                readonly description: "A question or option key, unique within its manifest or question.";
+                readonly type: "string";
+                readonly pattern: "^[A-Za-z0-9._-]{1,64}$";
+            };
+            readonly ElectionId: {
+                readonly title: "ElectionId";
+                readonly description: "An election's identifier, unique within its community. A closed alphabet: it appears in the ticket class label `voter/<electionId>` and is framed into every hash a cast is bound to.";
+                readonly type: "string";
+                readonly pattern: "^[A-Za-z0-9._-]{1,128}$";
+            };
+            readonly DigestMultibase: {
+                readonly title: "DigestMultibase";
+                readonly description: "A cryptographic digest as a multibase-encoded multihash — the encoding the W3C Verifiable Credentials Data Model 2.0 defines for `digestMultibase`, and the one `did:webvh` uses for its SCID and entry hashes.\n\nMultihash carries the hash algorithm in-band, so the value is self-describing and the wire format survives an algorithm change without a schema revision; multibase does the same for the base encoding, so a verifier never infers base58 from base64url by context. A bare hex string or a `sha-256:`-style prefix hard-codes one algorithm into the wire contract and is non-conforming here.\n\nThis definition constrains the *encoding only*. What the digest is computed over is stated by each referencing field, because it differs legitimately: a digest over a JSON document is taken over its RFC 8785 (JCS) canonicalization, while a digest over an opaque artifact is taken over its bytes. A field whose input is a JSON document and which does not name a canonicalization is not reproducible.\n\nRestricted to the two multibase headers W3C Controlled Identifiers 1.0 §2.4 normatively requires — `z` (base58btc) and `u` (base64url-no-pad). CID permits others but states that \"interoperability is not guaranteed between implementations using such values\", and a registry whose purpose is interoperability should not mint digests a conforming verifier may be unable to read. The alphabets are enforced rather than assumed: base58btc excludes 0, O, I and l, and an earlier permissive pattern let three published examples carry digests that were not valid base58 at all. base58btc is RECOMMENDED, for consistency with `did:key` and `did:webvh`.";
+                readonly type: "string";
+                readonly minLength: 16;
+                readonly pattern: "^(z[1-9A-HJ-NP-Za-km-z]+|u[A-Za-z0-9_-]+)$";
+                readonly examples: readonly ["zQmbWqxBEKC3P8tqsKc98xmWNzrzDtRLMiMPL8wBuTGsMnR"];
+            };
+            readonly PartialDecryption: {
+                readonly title: "PartialDecryption";
+                readonly description: "Trustee `trustee`'s share of one decryption, `d = x_j·a`, with a Chaum–Pedersen proof against its verification key (CONVENTIONS §9.7).";
+                readonly type: "object";
+                readonly additionalProperties: false;
+                readonly required: readonly ["target", "d", "proof"];
+                readonly properties: {
+                    readonly target: {
+                        readonly $ref: "#/$defs/DecryptionTarget";
+                    };
+                    readonly d: {
+                        readonly $ref: "#/$defs/GroupElement";
+                    };
+                    readonly proof: {
+                        readonly $ref: "#/$defs/SigmaProof";
+                    };
+                };
+            };
+            readonly SigmaProof: {
+                readonly title: "SigmaProof";
+                readonly description: "A non-interactive sigma proof as its challenge and response `(c, z)` (Schnorr or Chaum–Pedersen; CONVENTIONS §9.3).";
+                readonly type: "object";
+                readonly additionalProperties: false;
+                readonly required: readonly ["c", "z"];
+                readonly properties: {
+                    readonly c: {
+                        readonly $ref: "#/$defs/GroupScalar";
+                    };
+                    readonly z: {
+                        readonly $ref: "#/$defs/GroupScalar";
+                    };
+                };
+            };
+            readonly GroupScalar: {
+                readonly title: "GroupScalar";
+                readonly description: "A scalar mod the Ristretto group order: 32 canonical little-endian bytes, multibase base58btc (CONVENTIONS §9.1).";
+                readonly type: "string";
+                readonly minLength: 2;
+                readonly maxLength: 64;
+                readonly pattern: "^z[1-9A-HJ-NP-Za-km-z]+$";
+            };
+            readonly GroupElement: {
+                readonly title: "GroupElement";
+                readonly description: "A Ristretto group element: its 32-byte compression, multibase base58btc. Never the identity (CONVENTIONS §9.1).";
+                readonly type: "string";
+                readonly minLength: 2;
+                readonly maxLength: 64;
+                readonly pattern: "^z[1-9A-HJ-NP-Za-km-z]+$";
+            };
+            readonly DecryptionTarget: {
+                readonly title: "DecryptionTarget";
+                readonly description: "What a partial decryption decrypts: the sealed cast at a board leaf, or the total of one option of one question.";
+                readonly type: "object";
+                readonly additionalProperties: false;
+                readonly required: readonly ["ciphertext"];
+                readonly properties: {
+                    readonly leafIndex: {
+                        readonly type: "integer";
+                        readonly minimum: 0;
+                        readonly description: "A sealed cast's board leaf.";
+                    };
+                    readonly question: {
+                        readonly $ref: "#/$defs/Key";
+                    };
+                    readonly option: {
+                        readonly $ref: "#/$defs/Key";
+                    };
+                    readonly ciphertext: {
+                        readonly $ref: "#/$defs/ElGamalCiphertext";
+                    };
+                };
+                readonly oneOf: readonly [{
+                    readonly required: readonly ["leafIndex"];
+                }, {
+                    readonly required: readonly ["question", "option"];
+                }];
+            };
+            readonly ElGamalCiphertext: {
+                readonly title: "ElGamalCiphertext";
+                readonly description: "`(a, b) = (r·G, M + r·Y)` under the election key `Y` (CONVENTIONS §9.2).";
+                readonly type: "object";
+                readonly additionalProperties: false;
+                readonly required: readonly ["a", "b"];
+                readonly properties: {
+                    readonly a: {
+                        readonly $ref: "#/$defs/GroupElement";
+                    };
+                    readonly b: {
+                        readonly $ref: "#/$defs/GroupElement";
+                    };
+                };
+            };
+            readonly TrusteeIndex: {
+                readonly title: "TrusteeIndex";
+                readonly description: "A trustee's index: its position in the manifest's `trustees.dids`, counting from 1.";
+                readonly type: "integer";
+                readonly minimum: 1;
+                readonly maximum: 64;
+            };
+            readonly ElectionKey: {
+                readonly title: "ElectionKey";
+                readonly description: "The election key and each trustee's public verification key, computed from the qualified dealings (CONVENTIONS §9.6). Anyone can recompute it from the board.";
+                readonly type: "object";
+                readonly additionalProperties: false;
+                readonly required: readonly ["key", "qualified", "verification"];
+                readonly properties: {
+                    readonly key: {
+                        readonly $ref: "#/$defs/GroupElement";
+                    };
+                    readonly qualified: {
+                        readonly type: "array";
+                        readonly minItems: 1;
+                        readonly maxItems: 64;
+                        readonly items: {
+                            readonly $ref: "#/$defs/TrusteeIndex";
+                        };
+                        readonly description: "The dealers whose dealings the key is formed from.";
+                    };
+                    readonly verification: {
+                        readonly type: "array";
+                        readonly minItems: 2;
+                        readonly maxItems: 64;
+                        readonly items: {
+                            readonly type: "object";
+                            readonly additionalProperties: false;
+                            readonly required: readonly ["trustee", "key"];
+                            readonly properties: {
+                                readonly trustee: {
+                                    readonly $ref: "#/$defs/TrusteeIndex";
+                                };
+                                readonly key: {
+                                    readonly $ref: "#/$defs/GroupElement";
+                                };
+                            };
+                        };
+                    };
+                };
+            };
+            readonly Dealing: {
+                readonly title: "Dealing";
+                readonly description: "A trustee's contribution to the election key: Feldman commitments to its polynomial, a proof of knowledge of the constant term, and one share per trustee sealed to that trustee's transport key (CONVENTIONS §9.6).";
+                readonly type: "object";
+                readonly additionalProperties: false;
+                readonly required: readonly ["dealer", "commitments", "pok", "shares"];
+                readonly properties: {
+                    readonly dealer: {
+                        readonly $ref: "#/$defs/TrusteeIndex";
+                    };
+                    readonly commitments: {
+                        readonly type: "array";
+                        readonly minItems: 2;
+                        readonly maxItems: 64;
+                        readonly items: {
+                            readonly $ref: "#/$defs/GroupElement";
+                        };
+                    };
+                    readonly pok: {
+                        readonly $ref: "#/$defs/SigmaProof";
+                    };
+                    readonly shares: {
+                        readonly type: "array";
+                        readonly minItems: 2;
+                        readonly maxItems: 64;
+                        readonly items: {
+                            readonly $ref: "#/$defs/SealedShare";
+                        };
+                    };
+                };
+            };
+            readonly SealedShare: {
+                readonly title: "SealedShare";
+                readonly type: "object";
+                readonly additionalProperties: false;
+                readonly required: readonly ["recipient", "share"];
+                readonly properties: {
+                    readonly recipient: {
+                        readonly $ref: "#/$defs/TrusteeIndex";
+                    };
+                    readonly share: {
+                        readonly $ref: "#/$defs/SealedPayload";
+                    };
+                };
+            };
+            readonly SealedPayload: {
+                readonly title: "SealedPayload";
+                readonly description: "Bytes sealed to a key: a random group element encrypted as `kem`, and the bytes under ChaCha20-Poly1305 with a key derived from it, multibase base58btc (CONVENTIONS §9.4).";
+                readonly type: "object";
+                readonly additionalProperties: false;
+                readonly required: readonly ["kem", "body"];
+                readonly properties: {
+                    readonly kem: {
+                        readonly $ref: "#/$defs/ElGamalCiphertext";
+                    };
+                    readonly body: {
+                        readonly type: "string";
+                        readonly minLength: 2;
+                        readonly maxLength: 131072;
+                        readonly pattern: "^z[1-9A-HJ-NP-Za-km-z]+$";
+                    };
+                };
+            };
+            readonly TransportKey: {
+                readonly title: "TransportKey";
+                readonly description: "The group element a trustee's shares are sealed to, with a Schnorr proof of knowledge of its discrete log (CONVENTIONS §9.6).";
+                readonly type: "object";
+                readonly additionalProperties: false;
+                readonly required: readonly ["trustee", "key", "pok"];
+                readonly properties: {
+                    readonly trustee: {
+                        readonly $ref: "#/$defs/TrusteeIndex";
+                    };
+                    readonly key: {
+                        readonly $ref: "#/$defs/GroupElement";
+                    };
+                    readonly pok: {
+                        readonly $ref: "#/$defs/SigmaProof";
+                    };
+                };
+            };
+            readonly EncryptedCast: {
+                readonly title: "EncryptedCast";
+                readonly description: "A cast of a sealed or tallied-encrypted election: exactly one of `sealed` (the Ballot's JCS bytes sealed to the election key) or `encrypted`, with the tag and the attestation over the JCS bytes of whichever is present (CONVENTIONS §3.6, §9.5).";
+                readonly type: "object";
+                readonly additionalProperties: false;
+                readonly required: readonly ["tag", "attestation"];
+                readonly properties: {
+                    readonly sealed: {
+                        readonly $ref: "#/$defs/SealedPayload";
+                    };
+                    readonly encrypted: {
+                        readonly $ref: "#/$defs/EncryptedBallot";
+                    };
+                    readonly tag: {
+                        readonly $ref: "#/$defs/Multibase";
+                    };
+                    readonly attestation: {
+                        readonly $ref: "#/$defs/Multibase";
+                    };
+                };
+                readonly oneOf: readonly [{
+                    readonly required: readonly ["sealed"];
+                }, {
+                    readonly required: readonly ["encrypted"];
+                }];
+            };
+            readonly Multibase: {
+                readonly title: "Multibase";
+                readonly description: "A binary value, multibase base58btc over the suite's canonical (compressed) encoding.";
+                readonly type: "string";
+                readonly maxLength: 16384;
+                readonly pattern: "^z[1-9A-HJ-NP-Za-km-z]+$";
+            };
+            readonly EncryptedBallot: {
+                readonly title: "EncryptedBallot";
+                readonly description: "A tallied-encrypted ballot: one EncryptedQuestion per manifest question, in the manifest's order. Never decrypted (VTI-VOT-064).";
+                readonly type: "object";
+                readonly additionalProperties: false;
+                readonly required: readonly ["electionId", "manifestDigest", "questions"];
+                readonly properties: {
+                    readonly electionId: {
+                        readonly $ref: "#/$defs/ElectionId";
+                    };
+                    readonly manifestDigest: {
+                        readonly $ref: "#/$defs/DigestMultibase";
+                    };
+                    readonly questions: {
+                        readonly type: "array";
+                        readonly minItems: 1;
+                        readonly maxItems: 64;
+                        readonly items: {
+                            readonly $ref: "#/$defs/EncryptedQuestion";
+                        };
+                    };
+                };
+            };
+            readonly EncryptedQuestion: {
+                readonly title: "EncryptedQuestion";
+                readonly description: "One choice question of a tallied-encrypted ballot: per option, in the manifest's order, an encryption of 0 or 1 with its proof; and a proof that the selections sum to a count the question admits (CONVENTIONS §9.5).";
+                readonly type: "object";
+                readonly additionalProperties: false;
+                readonly required: readonly ["question", "options", "sumProof"];
+                readonly properties: {
+                    readonly question: {
+                        readonly $ref: "#/$defs/Key";
+                    };
+                    readonly options: {
+                        readonly type: "array";
+                        readonly minItems: 1;
+                        readonly maxItems: 64;
+                        readonly items: {
+                            readonly $ref: "#/$defs/EncryptedOption";
+                        };
+                    };
+                    readonly sumProof: {
+                        readonly $ref: "#/$defs/DisjunctiveProof";
+                    };
+                };
+            };
+            readonly DisjunctiveProof: {
+                readonly title: "DisjunctiveProof";
+                readonly description: "A disjunctive proof that a ciphertext encrypts one value of a public list: one `(c, z)` per value, in the list's order (CONVENTIONS §9.3).";
+                readonly type: "array";
+                readonly minItems: 1;
+                readonly maxItems: 65;
+                readonly items: {
+                    readonly $ref: "#/$defs/SigmaProof";
+                };
+            };
+            readonly EncryptedOption: {
+                readonly title: "EncryptedOption";
+                readonly type: "object";
+                readonly additionalProperties: false;
+                readonly required: readonly ["ciphertext", "proof"];
+                readonly properties: {
+                    readonly ciphertext: {
+                        readonly $ref: "#/$defs/ElGamalCiphertext";
+                    };
+                    readonly proof: {
+                        readonly $ref: "#/$defs/DisjunctiveProof";
+                    };
+                };
+            };
+            readonly ElectionResult: {
+                readonly title: "ElectionResult";
+                readonly description: "An election's result, computable by anyone who can read its board from the board and the registration alone (VTI-VOT-070).";
+                readonly type: "object";
+                readonly additionalProperties: false;
+                readonly required: readonly ["electionId", "manifestDigest", "ballotsCounted", "questions", "head"];
+                readonly properties: {
+                    readonly electionId: {
+                        readonly $ref: "#/$defs/ElectionId";
+                    };
+                    readonly manifestDigest: {
+                        readonly $ref: "#/$defs/DigestMultibase";
+                    };
+                    readonly ballotsCounted: {
+                        readonly type: "integer";
+                        readonly minimum: 0;
+                    };
+                    readonly questions: {
+                        readonly type: "array";
+                        readonly items: {
+                            readonly $ref: "#/$defs/QuestionResult";
+                        };
+                    };
+                    readonly head: {
+                        readonly $ref: "#/$defs/BoardHead";
+                        readonly description: "The head of the board as it stood at close: the result counts exactly its entries.";
+                    };
+                };
+            };
+            readonly BoardHead: {
+                readonly title: "BoardHead";
+                readonly description: "A board's tree head (RFC 9162 §2.1). A head is signed by being carried in a document the ballot box signs; whoever keeps a head keeps that whole document.";
+                readonly type: "object";
+                readonly additionalProperties: false;
+                readonly required: readonly ["electionId", "treeSize", "rootHash", "issuedAt"];
+                readonly properties: {
+                    readonly electionId: {
+                        readonly $ref: "#/$defs/ElectionId";
+                    };
+                    readonly treeSize: {
+                        readonly type: "integer";
+                        readonly minimum: 0;
+                    };
+                    readonly rootHash: {
+                        readonly $ref: "#/$defs/DigestMultibase";
+                        readonly description: "The RFC 9162 Merkle tree hash (SHA-256) of the first `treeSize` entries, as a multihash.";
+                    };
+                    readonly issuedAt: {
+                        readonly type: "string";
+                        readonly format: "date-time";
+                    };
+                };
+            };
+            readonly QuestionResult: {
+                readonly title: "QuestionResult";
+                readonly description: "One question's totals. `choice`: selections per option. `ranking`: per option, how many ballots placed it at each position (index 0 = first). `score`: per option, the sum and the number of ballots that scored it. `text`: the answers, in board order, withheld (`withheld: true`) below the manifest's `textReleaseThreshold`. `abstained` counts ballots that left the question unanswered.";
+                readonly type: "object";
+                readonly additionalProperties: false;
+                readonly required: readonly ["question", "abstained"];
+                readonly properties: {
+                    readonly question: {
                         readonly $ref: "#/$defs/Key";
                     };
-                    readonly uniqueItems: true;
-                };
-                readonly ranking: {
-                    readonly type: "array";
-                    readonly items: {
-                        readonly $ref: "#/$defs/Key";
+                    readonly abstained: {
+                        readonly type: "integer";
+                        readonly minimum: 0;
                     };
-                    readonly uniqueItems: true;
-                };
-                readonly scores: {
-                    readonly type: "object";
-                    readonly propertyNames: {
-                        readonly $ref: "#/$defs/Key";
+                    readonly choice: {
+                        readonly type: "object";
+                        readonly propertyNames: {
+                            readonly $ref: "#/$defs/Key";
+                        };
+                        readonly additionalProperties: {
+                            readonly type: "integer";
+                            readonly minimum: 0;
+                        };
                     };
-                    readonly additionalProperties: {
-                        readonly type: "integer";
+                    readonly ranking: {
+                        readonly type: "object";
+                        readonly propertyNames: {
+                            readonly $ref: "#/$defs/Key";
+                        };
+                        readonly additionalProperties: {
+                            readonly type: "array";
+                            readonly items: {
+                                readonly type: "integer";
+                                readonly minimum: 0;
+                            };
+                        };
+                    };
+                    readonly score: {
+                        readonly type: "object";
+                        readonly propertyNames: {
+                            readonly $ref: "#/$defs/Key";
+                        };
+                        readonly additionalProperties: {
+                            readonly type: "object";
+                            readonly additionalProperties: false;
+                            readonly required: readonly ["sum", "count"];
+                            readonly properties: {
+                                readonly sum: {
+                                    readonly type: "integer";
+                                };
+                                readonly count: {
+                                    readonly type: "integer";
+                                    readonly minimum: 0;
+                                };
+                            };
+                        };
+                    };
+                    readonly text: {
+                        readonly type: "array";
+                        readonly items: {
+                            readonly type: "string";
+                            readonly maxLength: 4096;
+                        };
+                    };
+                    readonly withheld: {
+                        readonly type: "boolean";
                     };
                 };
-                readonly text: {
-                    readonly type: "string";
-                    readonly maxLength: 4096;
-                };
-                readonly abstain: {
-                    readonly const: true;
+            };
+            readonly Cast: {
+                readonly title: "Cast";
+                readonly description: "A ballot and the PCS attestation that admits it (VTI-VOT-030). `attestation` is the suite's canonical encoding of the attestation made for the election point with the ballot context bound in (CONVENTIONS §3); `tag` repeats its tag so a ballot box can refuse a duplicate before the pairing check.";
+                readonly type: "object";
+                readonly additionalProperties: false;
+                readonly required: readonly ["ballot", "tag", "attestation"];
+                readonly properties: {
+                    readonly ballot: {
+                        readonly $ref: "#/$defs/Ballot";
+                    };
+                    readonly tag: {
+                        readonly $ref: "#/$defs/Multibase";
+                    };
+                    readonly attestation: {
+                        readonly $ref: "#/$defs/Multibase";
+                    };
                 };
             };
         };
     };
 };
 /**
- * SPEC.md §7.2 policy for the request variant, from this specification's
- * front matter. Pass to `consumeInbound` — items 5b, 7 and 8 are
- * per-specification and cannot be derived from the document alone, and
- * item 2 needs the schema this carries.
+ * SPEC.md §7.2 policy for the success-response variant. `isRecipientRequired`
+ * tracks the *issuer* party's requirement because a response swaps the
+ * parties (§7.3 item 5).
  */
-export declare const SPEC: {
-    readonly typeUri: "https://trusttasks.org/spec/voting/board/read/0.1";
+export declare const RESPONSE_SPEC: {
+    readonly typeUri: "https://trusttasks.org/spec/voting/board/read/0.1#response";
     readonly isBearer: false;
     readonly isProofRequired: false;
-    readonly isRecipientRequired: true;
+    readonly isRecipientRequired: false;
     readonly isIssuedAtRequired: false;
     readonly payloadSchema: {
         readonly $schema: "https://json-schema.org/draft/2020-12/schema";
-        readonly $id: "https://trusttasks.org/spec/voting/board/read/0.1";
-        readonly title: "Voting — Board Read — payload";
-        readonly description: "Reads a range of an election board's entries, against the current head or against an earlier tree size.";
-        readonly type: "object";
-        readonly additionalProperties: false;
-        readonly required: readonly ["community", "electionId", "from", "limit"];
-        readonly properties: {
-            readonly community: {
-                readonly type: "string";
-                readonly minLength: 1;
-                readonly maxLength: 2048;
-                readonly description: "The community's DID.";
-            };
-            readonly electionId: {
-                readonly $ref: "#/$defs/ElectionId";
-            };
-            readonly from: {
-                readonly type: "integer";
-                readonly minimum: 0;
-                readonly description: "The index of the first entry to return.";
-            };
-            readonly limit: {
-                readonly type: "integer";
-                readonly minimum: 1;
-                readonly maximum: 1000;
-                readonly description: "The most entries to return.";
-            };
-            readonly treeSize: {
-                readonly type: "integer";
-                readonly minimum: 0;
-                readonly description: "Read against the board as it stood at this size — the size of a head the reader holds. At most the current size. Absent: the current size.";
-            };
-            readonly ext: {
-                readonly $ref: "#/$defs/Ext";
-            };
-        };
+        readonly $ref: "#/$defs/Response";
         readonly $defs: {
             readonly Response: {
                 readonly $anchor: "response";
@@ -978,20 +2725,164 @@ export declare const SPEC: {
                     readonly required: readonly ["kind", "result"];
                     readonly properties: {
                         readonly kind: {
-                            readonly const: "result";
+                            readonly const: "result";
+                        };
+                        readonly result: {
+                            readonly $ref: "#/$defs/ElectionResult";
+                        };
+                    };
+                }, {
+                    readonly title: "EncryptedCastEntry";
+                    readonly type: "object";
+                    readonly additionalProperties: false;
+                    readonly required: readonly ["kind", "cast"];
+                    readonly properties: {
+                        readonly kind: {
+                            readonly const: "encryptedCast";
+                        };
+                        readonly cast: {
+                            readonly $ref: "#/$defs/EncryptedCast";
+                        };
+                    };
+                }, {
+                    readonly title: "TransportKeyEntry";
+                    readonly type: "object";
+                    readonly additionalProperties: false;
+                    readonly required: readonly ["kind", "transportKey"];
+                    readonly properties: {
+                        readonly kind: {
+                            readonly const: "transportKey";
+                        };
+                        readonly transportKey: {
+                            readonly $ref: "#/$defs/TransportKey";
+                        };
+                    };
+                }, {
+                    readonly title: "DealingEntry";
+                    readonly type: "object";
+                    readonly additionalProperties: false;
+                    readonly required: readonly ["kind", "dealing"];
+                    readonly properties: {
+                        readonly kind: {
+                            readonly const: "dealing";
+                        };
+                        readonly dealing: {
+                            readonly $ref: "#/$defs/Dealing";
+                        };
+                    };
+                }, {
+                    readonly title: "ConfirmationEntry";
+                    readonly type: "object";
+                    readonly additionalProperties: false;
+                    readonly required: readonly ["kind", "trustee", "complaints"];
+                    readonly properties: {
+                        readonly kind: {
+                            readonly const: "confirmation";
+                        };
+                        readonly trustee: {
+                            readonly $ref: "#/$defs/TrusteeIndex";
+                        };
+                        readonly complaints: {
+                            readonly type: "array";
+                            readonly maxItems: 64;
+                            readonly items: {
+                                readonly $ref: "#/$defs/TrusteeIndex";
+                            };
+                        };
+                    };
+                }, {
+                    readonly title: "JustificationEntry";
+                    readonly type: "object";
+                    readonly additionalProperties: false;
+                    readonly required: readonly ["kind", "dealer", "recipient", "share"];
+                    readonly properties: {
+                        readonly kind: {
+                            readonly const: "justification";
+                        };
+                        readonly dealer: {
+                            readonly $ref: "#/$defs/TrusteeIndex";
+                        };
+                        readonly recipient: {
+                            readonly $ref: "#/$defs/TrusteeIndex";
+                        };
+                        readonly share: {
+                            readonly $ref: "#/$defs/GroupScalar";
+                        };
+                    };
+                }, {
+                    readonly title: "ElectionKeyEntry";
+                    readonly type: "object";
+                    readonly additionalProperties: false;
+                    readonly required: readonly ["kind", "electionKey"];
+                    readonly properties: {
+                        readonly kind: {
+                            readonly const: "electionKey";
+                        };
+                        readonly electionKey: {
+                            readonly $ref: "#/$defs/ElectionKey";
+                        };
+                    };
+                }, {
+                    readonly title: "PartialDecryptionsEntry";
+                    readonly type: "object";
+                    readonly additionalProperties: false;
+                    readonly required: readonly ["kind", "trustee", "partials"];
+                    readonly properties: {
+                        readonly kind: {
+                            readonly const: "partials";
+                        };
+                        readonly trustee: {
+                            readonly $ref: "#/$defs/TrusteeIndex";
+                        };
+                        readonly partials: {
+                            readonly type: "array";
+                            readonly minItems: 1;
+                            readonly maxItems: 100000;
+                            readonly items: {
+                                readonly $ref: "#/$defs/PartialDecryption";
+                            };
+                        };
+                    };
+                }, {
+                    readonly title: "UnsealedEntry";
+                    readonly type: "object";
+                    readonly additionalProperties: false;
+                    readonly required: readonly ["kind", "leafIndex", "ballot"];
+                    readonly properties: {
+                        readonly kind: {
+                            readonly const: "unsealed";
+                        };
+                        readonly leafIndex: {
+                            readonly type: "integer";
+                            readonly minimum: 0;
+                        };
+                        readonly ballot: {
+                            readonly $ref: "#/$defs/Ballot";
+                        };
+                    };
+                }, {
+                    readonly title: "SpoiledEntry";
+                    readonly description: "A sealed cast that did not open, or opened to no valid ballot: not counted (CONVENTIONS §9.7).";
+                    readonly type: "object";
+                    readonly additionalProperties: false;
+                    readonly required: readonly ["kind", "leafIndex"];
+                    readonly properties: {
+                        readonly kind: {
+                            readonly const: "spoiled";
                         };
-                        readonly result: {
-                            readonly $ref: "#/$defs/ElectionResult";
+                        readonly leafIndex: {
+                            readonly type: "integer";
+                            readonly minimum: 0;
                         };
                     };
                 }];
             };
-            readonly ElectionResult: {
-                readonly title: "ElectionResult";
-                readonly description: "An election's result, computable by anyone who can read its board from the board and the registration alone (VTI-VOT-070).";
+            readonly Ballot: {
+                readonly title: "Ballot";
+                readonly description: "An open ballot: one answer per question of the manifest, in any order. The bytes a cast's proof binds are the RFC 8785 (JCS) canonicalization of this object as received.";
                 readonly type: "object";
                 readonly additionalProperties: false;
-                readonly required: readonly ["electionId", "manifestDigest", "ballotsCounted", "questions", "head"];
+                readonly required: readonly ["electionId", "manifestDigest", "answers"];
                 readonly properties: {
                     readonly electionId: {
                         readonly $ref: "#/$defs/ElectionId";
@@ -999,46 +2890,66 @@ export declare const SPEC: {
                     readonly manifestDigest: {
                         readonly $ref: "#/$defs/DigestMultibase";
                     };
-                    readonly ballotsCounted: {
-                        readonly type: "integer";
-                        readonly minimum: 0;
-                    };
-                    readonly questions: {
+                    readonly answers: {
                         readonly type: "array";
+                        readonly minItems: 1;
+                        readonly maxItems: 128;
                         readonly items: {
-                            readonly $ref: "#/$defs/QuestionResult";
+                            readonly $ref: "#/$defs/Answer";
                         };
                     };
-                    readonly head: {
-                        readonly $ref: "#/$defs/BoardHead";
-                        readonly description: "The head of the board as it stood at close: the result counts exactly its entries.";
-                    };
                 };
             };
-            readonly BoardHead: {
-                readonly title: "BoardHead";
-                readonly description: "A board's tree head (RFC 9162 §2.1). A head is signed by being carried in a document the ballot box signs; whoever keeps a head keeps that whole document.";
+            readonly Answer: {
+                readonly title: "Answer";
+                readonly description: "The answer to one question. Exactly one member besides `question` is present, matching the question's type, or `abstain` for an optional question left unanswered.";
                 readonly type: "object";
                 readonly additionalProperties: false;
-                readonly required: readonly ["electionId", "treeSize", "rootHash", "issuedAt"];
+                readonly required: readonly ["question"];
+                readonly minProperties: 2;
+                readonly maxProperties: 2;
                 readonly properties: {
-                    readonly electionId: {
-                        readonly $ref: "#/$defs/ElectionId";
+                    readonly question: {
+                        readonly $ref: "#/$defs/Key";
                     };
-                    readonly treeSize: {
-                        readonly type: "integer";
-                        readonly minimum: 0;
+                    readonly choice: {
+                        readonly type: "array";
+                        readonly items: {
+                            readonly $ref: "#/$defs/Key";
+                        };
+                        readonly uniqueItems: true;
                     };
-                    readonly rootHash: {
-                        readonly $ref: "#/$defs/DigestMultibase";
-                        readonly description: "The RFC 9162 Merkle tree hash (SHA-256) of the first `treeSize` entries, as a multihash.";
+                    readonly ranking: {
+                        readonly type: "array";
+                        readonly items: {
+                            readonly $ref: "#/$defs/Key";
+                        };
+                        readonly uniqueItems: true;
                     };
-                    readonly issuedAt: {
+                    readonly scores: {
+                        readonly type: "object";
+                        readonly propertyNames: {
+                            readonly $ref: "#/$defs/Key";
+                        };
+                        readonly additionalProperties: {
+                            readonly type: "integer";
+                        };
+                    };
+                    readonly text: {
                         readonly type: "string";
-                        readonly format: "date-time";
+                        readonly maxLength: 4096;
+                    };
+                    readonly abstain: {
+                        readonly const: true;
                     };
                 };
             };
+            readonly Key: {
+                readonly title: "Key";
+                readonly description: "A question or option key, unique within its manifest or question.";
+                readonly type: "string";
+                readonly pattern: "^[A-Za-z0-9._-]{1,64}$";
+            };
             readonly ElectionId: {
                 readonly title: "ElectionId";
                 readonly description: "An election's identifier, unique within its community. A closed alphabet: it appears in the ticket class label `voter/<electionId>` and is framed into every hash a cast is bound to.";
@@ -1053,308 +2964,327 @@ export declare const SPEC: {
                 readonly pattern: "^(z[1-9A-HJ-NP-Za-km-z]+|u[A-Za-z0-9_-]+)$";
                 readonly examples: readonly ["zQmbWqxBEKC3P8tqsKc98xmWNzrzDtRLMiMPL8wBuTGsMnR"];
             };
-            readonly QuestionResult: {
-                readonly title: "QuestionResult";
-                readonly description: "One question's totals. `choice`: selections per option. `ranking`: per option, how many ballots placed it at each position (index 0 = first). `score`: per option, the sum and the number of ballots that scored it. `text`: the answers, in board order, withheld (`withheld: true`) below the manifest's `textReleaseThreshold`. `abstained` counts ballots that left the question unanswered.";
+            readonly PartialDecryption: {
+                readonly title: "PartialDecryption";
+                readonly description: "Trustee `trustee`'s share of one decryption, `d = x_j·a`, with a Chaum–Pedersen proof against its verification key (CONVENTIONS §9.7).";
                 readonly type: "object";
                 readonly additionalProperties: false;
-                readonly required: readonly ["question", "abstained"];
+                readonly required: readonly ["target", "d", "proof"];
                 readonly properties: {
-                    readonly question: {
-                        readonly $ref: "#/$defs/Key";
+                    readonly target: {
+                        readonly $ref: "#/$defs/DecryptionTarget";
                     };
-                    readonly abstained: {
+                    readonly d: {
+                        readonly $ref: "#/$defs/GroupElement";
+                    };
+                    readonly proof: {
+                        readonly $ref: "#/$defs/SigmaProof";
+                    };
+                };
+            };
+            readonly SigmaProof: {
+                readonly title: "SigmaProof";
+                readonly description: "A non-interactive sigma proof as its challenge and response `(c, z)` (Schnorr or Chaum–Pedersen; CONVENTIONS §9.3).";
+                readonly type: "object";
+                readonly additionalProperties: false;
+                readonly required: readonly ["c", "z"];
+                readonly properties: {
+                    readonly c: {
+                        readonly $ref: "#/$defs/GroupScalar";
+                    };
+                    readonly z: {
+                        readonly $ref: "#/$defs/GroupScalar";
+                    };
+                };
+            };
+            readonly GroupScalar: {
+                readonly title: "GroupScalar";
+                readonly description: "A scalar mod the Ristretto group order: 32 canonical little-endian bytes, multibase base58btc (CONVENTIONS §9.1).";
+                readonly type: "string";
+                readonly minLength: 2;
+                readonly maxLength: 64;
+                readonly pattern: "^z[1-9A-HJ-NP-Za-km-z]+$";
+            };
+            readonly GroupElement: {
+                readonly title: "GroupElement";
+                readonly description: "A Ristretto group element: its 32-byte compression, multibase base58btc. Never the identity (CONVENTIONS §9.1).";
+                readonly type: "string";
+                readonly minLength: 2;
+                readonly maxLength: 64;
+                readonly pattern: "^z[1-9A-HJ-NP-Za-km-z]+$";
+            };
+            readonly DecryptionTarget: {
+                readonly title: "DecryptionTarget";
+                readonly description: "What a partial decryption decrypts: the sealed cast at a board leaf, or the total of one option of one question.";
+                readonly type: "object";
+                readonly additionalProperties: false;
+                readonly required: readonly ["ciphertext"];
+                readonly properties: {
+                    readonly leafIndex: {
                         readonly type: "integer";
                         readonly minimum: 0;
+                        readonly description: "A sealed cast's board leaf.";
                     };
-                    readonly choice: {
-                        readonly type: "object";
-                        readonly propertyNames: {
-                            readonly $ref: "#/$defs/Key";
-                        };
-                        readonly additionalProperties: {
-                            readonly type: "integer";
-                            readonly minimum: 0;
-                        };
+                    readonly question: {
+                        readonly $ref: "#/$defs/Key";
                     };
-                    readonly ranking: {
-                        readonly type: "object";
-                        readonly propertyNames: {
-                            readonly $ref: "#/$defs/Key";
-                        };
-                        readonly additionalProperties: {
-                            readonly type: "array";
-                            readonly items: {
-                                readonly type: "integer";
-                                readonly minimum: 0;
-                            };
-                        };
+                    readonly option: {
+                        readonly $ref: "#/$defs/Key";
                     };
-                    readonly score: {
-                        readonly type: "object";
-                        readonly propertyNames: {
-                            readonly $ref: "#/$defs/Key";
+                    readonly ciphertext: {
+                        readonly $ref: "#/$defs/ElGamalCiphertext";
+                    };
+                };
+                readonly oneOf: readonly [{
+                    readonly required: readonly ["leafIndex"];
+                }, {
+                    readonly required: readonly ["question", "option"];
+                }];
+            };
+            readonly ElGamalCiphertext: {
+                readonly title: "ElGamalCiphertext";
+                readonly description: "`(a, b) = (r·G, M + r·Y)` under the election key `Y` (CONVENTIONS §9.2).";
+                readonly type: "object";
+                readonly additionalProperties: false;
+                readonly required: readonly ["a", "b"];
+                readonly properties: {
+                    readonly a: {
+                        readonly $ref: "#/$defs/GroupElement";
+                    };
+                    readonly b: {
+                        readonly $ref: "#/$defs/GroupElement";
+                    };
+                };
+            };
+            readonly TrusteeIndex: {
+                readonly title: "TrusteeIndex";
+                readonly description: "A trustee's index: its position in the manifest's `trustees.dids`, counting from 1.";
+                readonly type: "integer";
+                readonly minimum: 1;
+                readonly maximum: 64;
+            };
+            readonly ElectionKey: {
+                readonly title: "ElectionKey";
+                readonly description: "The election key and each trustee's public verification key, computed from the qualified dealings (CONVENTIONS §9.6). Anyone can recompute it from the board.";
+                readonly type: "object";
+                readonly additionalProperties: false;
+                readonly required: readonly ["key", "qualified", "verification"];
+                readonly properties: {
+                    readonly key: {
+                        readonly $ref: "#/$defs/GroupElement";
+                    };
+                    readonly qualified: {
+                        readonly type: "array";
+                        readonly minItems: 1;
+                        readonly maxItems: 64;
+                        readonly items: {
+                            readonly $ref: "#/$defs/TrusteeIndex";
                         };
-                        readonly additionalProperties: {
+                        readonly description: "The dealers whose dealings the key is formed from.";
+                    };
+                    readonly verification: {
+                        readonly type: "array";
+                        readonly minItems: 2;
+                        readonly maxItems: 64;
+                        readonly items: {
                             readonly type: "object";
                             readonly additionalProperties: false;
-                            readonly required: readonly ["sum", "count"];
+                            readonly required: readonly ["trustee", "key"];
                             readonly properties: {
-                                readonly sum: {
-                                    readonly type: "integer";
+                                readonly trustee: {
+                                    readonly $ref: "#/$defs/TrusteeIndex";
                                 };
-                                readonly count: {
-                                    readonly type: "integer";
-                                    readonly minimum: 0;
+                                readonly key: {
+                                    readonly $ref: "#/$defs/GroupElement";
                                 };
                             };
                         };
                     };
-                    readonly text: {
+                };
+            };
+            readonly Dealing: {
+                readonly title: "Dealing";
+                readonly description: "A trustee's contribution to the election key: Feldman commitments to its polynomial, a proof of knowledge of the constant term, and one share per trustee sealed to that trustee's transport key (CONVENTIONS §9.6).";
+                readonly type: "object";
+                readonly additionalProperties: false;
+                readonly required: readonly ["dealer", "commitments", "pok", "shares"];
+                readonly properties: {
+                    readonly dealer: {
+                        readonly $ref: "#/$defs/TrusteeIndex";
+                    };
+                    readonly commitments: {
                         readonly type: "array";
+                        readonly minItems: 2;
+                        readonly maxItems: 64;
                         readonly items: {
-                            readonly type: "string";
-                            readonly maxLength: 4096;
+                            readonly $ref: "#/$defs/GroupElement";
                         };
                     };
-                    readonly withheld: {
-                        readonly type: "boolean";
+                    readonly pok: {
+                        readonly $ref: "#/$defs/SigmaProof";
+                    };
+                    readonly shares: {
+                        readonly type: "array";
+                        readonly minItems: 2;
+                        readonly maxItems: 64;
+                        readonly items: {
+                            readonly $ref: "#/$defs/SealedShare";
+                        };
                     };
                 };
             };
-            readonly Key: {
-                readonly title: "Key";
-                readonly description: "A question or option key, unique within its manifest or question.";
-                readonly type: "string";
-                readonly pattern: "^[A-Za-z0-9._-]{1,64}$";
-            };
-            readonly Multibase: {
-                readonly title: "Multibase";
-                readonly description: "A binary value, multibase base58btc over the suite's canonical (compressed) encoding.";
-                readonly type: "string";
-                readonly maxLength: 16384;
-                readonly pattern: "^z[1-9A-HJ-NP-Za-km-z]+$";
-            };
-            readonly Cast: {
-                readonly title: "Cast";
-                readonly description: "A ballot and the PCS attestation that admits it (VTI-VOT-030). `attestation` is the suite's canonical encoding of the attestation made for the election point with the ballot context bound in (CONVENTIONS §3); `tag` repeats its tag so a ballot box can refuse a duplicate before the pairing check.";
+            readonly SealedShare: {
+                readonly title: "SealedShare";
                 readonly type: "object";
                 readonly additionalProperties: false;
-                readonly required: readonly ["ballot", "tag", "attestation"];
+                readonly required: readonly ["recipient", "share"];
                 readonly properties: {
-                    readonly ballot: {
-                        readonly $ref: "#/$defs/Ballot";
+                    readonly recipient: {
+                        readonly $ref: "#/$defs/TrusteeIndex";
                     };
-                    readonly tag: {
-                        readonly $ref: "#/$defs/Multibase";
+                    readonly share: {
+                        readonly $ref: "#/$defs/SealedPayload";
                     };
-                    readonly attestation: {
-                        readonly $ref: "#/$defs/Multibase";
+                };
+            };
+            readonly SealedPayload: {
+                readonly title: "SealedPayload";
+                readonly description: "Bytes sealed to a key: a random group element encrypted as `kem`, and the bytes under ChaCha20-Poly1305 with a key derived from it, multibase base58btc (CONVENTIONS §9.4).";
+                readonly type: "object";
+                readonly additionalProperties: false;
+                readonly required: readonly ["kem", "body"];
+                readonly properties: {
+                    readonly kem: {
+                        readonly $ref: "#/$defs/ElGamalCiphertext";
+                    };
+                    readonly body: {
+                        readonly type: "string";
+                        readonly minLength: 2;
+                        readonly maxLength: 131072;
+                        readonly pattern: "^z[1-9A-HJ-NP-Za-km-z]+$";
                     };
                 };
             };
-            readonly Ballot: {
-                readonly title: "Ballot";
-                readonly description: "An open ballot: one answer per question of the manifest, in any order. The bytes a cast's proof binds are the RFC 8785 (JCS) canonicalization of this object as received.";
+            readonly TransportKey: {
+                readonly title: "TransportKey";
+                readonly description: "The group element a trustee's shares are sealed to, with a Schnorr proof of knowledge of its discrete log (CONVENTIONS §9.6).";
                 readonly type: "object";
                 readonly additionalProperties: false;
-                readonly required: readonly ["electionId", "manifestDigest", "answers"];
+                readonly required: readonly ["trustee", "key", "pok"];
                 readonly properties: {
-                    readonly electionId: {
-                        readonly $ref: "#/$defs/ElectionId";
+                    readonly trustee: {
+                        readonly $ref: "#/$defs/TrusteeIndex";
                     };
-                    readonly manifestDigest: {
-                        readonly $ref: "#/$defs/DigestMultibase";
+                    readonly key: {
+                        readonly $ref: "#/$defs/GroupElement";
                     };
-                    readonly answers: {
-                        readonly type: "array";
-                        readonly minItems: 1;
-                        readonly maxItems: 128;
-                        readonly items: {
-                            readonly $ref: "#/$defs/Answer";
-                        };
+                    readonly pok: {
+                        readonly $ref: "#/$defs/SigmaProof";
                     };
                 };
             };
-            readonly Answer: {
-                readonly title: "Answer";
-                readonly description: "The answer to one question. Exactly one member besides `question` is present, matching the question's type, or `abstain` for an optional question left unanswered.";
+            readonly EncryptedCast: {
+                readonly title: "EncryptedCast";
+                readonly description: "A cast of a sealed or tallied-encrypted election: exactly one of `sealed` (the Ballot's JCS bytes sealed to the election key) or `encrypted`, with the tag and the attestation over the JCS bytes of whichever is present (CONVENTIONS §3.6, §9.5).";
                 readonly type: "object";
                 readonly additionalProperties: false;
-                readonly required: readonly ["question"];
-                readonly minProperties: 2;
-                readonly maxProperties: 2;
+                readonly required: readonly ["tag", "attestation"];
+                readonly properties: {
+                    readonly sealed: {
+                        readonly $ref: "#/$defs/SealedPayload";
+                    };
+                    readonly encrypted: {
+                        readonly $ref: "#/$defs/EncryptedBallot";
+                    };
+                    readonly tag: {
+                        readonly $ref: "#/$defs/Multibase";
+                    };
+                    readonly attestation: {
+                        readonly $ref: "#/$defs/Multibase";
+                    };
+                };
+                readonly oneOf: readonly [{
+                    readonly required: readonly ["sealed"];
+                }, {
+                    readonly required: readonly ["encrypted"];
+                }];
+            };
+            readonly Multibase: {
+                readonly title: "Multibase";
+                readonly description: "A binary value, multibase base58btc over the suite's canonical (compressed) encoding.";
+                readonly type: "string";
+                readonly maxLength: 16384;
+                readonly pattern: "^z[1-9A-HJ-NP-Za-km-z]+$";
+            };
+            readonly EncryptedBallot: {
+                readonly title: "EncryptedBallot";
+                readonly description: "A tallied-encrypted ballot: one EncryptedQuestion per manifest question, in the manifest's order. Never decrypted (VTI-VOT-064).";
+                readonly type: "object";
+                readonly additionalProperties: false;
+                readonly required: readonly ["electionId", "manifestDigest", "questions"];
                 readonly properties: {
-                    readonly question: {
-                        readonly $ref: "#/$defs/Key";
+                    readonly electionId: {
+                        readonly $ref: "#/$defs/ElectionId";
                     };
-                    readonly choice: {
-                        readonly type: "array";
-                        readonly items: {
-                            readonly $ref: "#/$defs/Key";
-                        };
-                        readonly uniqueItems: true;
+                    readonly manifestDigest: {
+                        readonly $ref: "#/$defs/DigestMultibase";
                     };
-                    readonly ranking: {
+                    readonly questions: {
                         readonly type: "array";
+                        readonly minItems: 1;
+                        readonly maxItems: 64;
                         readonly items: {
-                            readonly $ref: "#/$defs/Key";
-                        };
-                        readonly uniqueItems: true;
-                    };
-                    readonly scores: {
-                        readonly type: "object";
-                        readonly propertyNames: {
-                            readonly $ref: "#/$defs/Key";
-                        };
-                        readonly additionalProperties: {
-                            readonly type: "integer";
+                            readonly $ref: "#/$defs/EncryptedQuestion";
                         };
                     };
-                    readonly text: {
-                        readonly type: "string";
-                        readonly maxLength: 4096;
-                    };
-                    readonly abstain: {
-                        readonly const: true;
-                    };
                 };
             };
-        };
-    };
-};
-/**
- * SPEC.md §7.2 policy for the success-response variant. `isRecipientRequired`
- * tracks the *issuer* party's requirement because a response swaps the
- * parties (§7.3 item 5).
- */
-export declare const RESPONSE_SPEC: {
-    readonly typeUri: "https://trusttasks.org/spec/voting/board/read/0.1#response";
-    readonly isBearer: false;
-    readonly isProofRequired: false;
-    readonly isRecipientRequired: false;
-    readonly isIssuedAtRequired: false;
-    readonly payloadSchema: {
-        readonly $schema: "https://json-schema.org/draft/2020-12/schema";
-        readonly $ref: "#/$defs/Response";
-        readonly $defs: {
-            readonly Response: {
-                readonly $anchor: "response";
-                readonly title: "Voting — Board Read — response payload";
+            readonly EncryptedQuestion: {
+                readonly title: "EncryptedQuestion";
+                readonly description: "One choice question of a tallied-encrypted ballot: per option, in the manifest's order, an encryption of 0 or 1 with its proof; and a proof that the selections sum to a count the question admits (CONVENTIONS §9.5).";
                 readonly type: "object";
                 readonly additionalProperties: false;
-                readonly required: readonly ["treeSize", "entries"];
+                readonly required: readonly ["question", "options", "sumProof"];
                 readonly properties: {
-                    readonly treeSize: {
-                        readonly type: "integer";
-                        readonly minimum: 0;
-                        readonly description: "The tree size the page was read against. No entry at or beyond it is returned.";
+                    readonly question: {
+                        readonly $ref: "#/$defs/Key";
                     };
-                    readonly entries: {
+                    readonly options: {
                         readonly type: "array";
-                        readonly maxItems: 1000;
+                        readonly minItems: 1;
+                        readonly maxItems: 64;
                         readonly items: {
-                            readonly type: "object";
-                            readonly additionalProperties: false;
-                            readonly required: readonly ["index", "entry"];
-                            readonly properties: {
-                                readonly index: {
-                                    readonly type: "integer";
-                                    readonly minimum: 0;
-                                };
-                                readonly entry: {
-                                    readonly $ref: "#/$defs/BoardEntry";
-                                };
-                            };
+                            readonly $ref: "#/$defs/EncryptedOption";
                         };
-                        readonly description: "Consecutive entries from `from`, in board order.";
-                    };
-                    readonly next: {
-                        readonly type: "integer";
-                        readonly minimum: 1;
-                        readonly description: "The `from` of the next page. Absent when the page reaches `treeSize`.";
                     };
-                    readonly ext: {
-                        readonly $ref: "#/$defs/Ext";
+                    readonly sumProof: {
+                        readonly $ref: "#/$defs/DisjunctiveProof";
                     };
                 };
             };
-            readonly Ext: {
-                readonly title: "Ext";
-                readonly description: "Vendor-namespaced extension object per SPEC.md §4.5.1. Each immediate key MUST be a reverse-DNS namespace; structure under each namespace is opaque to the framework.";
-                readonly type: "object";
-                readonly minProperties: 1;
-                readonly additionalProperties: true;
-                readonly propertyNames: {
-                    readonly pattern: "^[a-z][a-z0-9-]*(\\.[a-z0-9-]+)+$";
+            readonly DisjunctiveProof: {
+                readonly title: "DisjunctiveProof";
+                readonly description: "A disjunctive proof that a ciphertext encrypts one value of a public list: one `(c, z)` per value, in the list's order (CONVENTIONS §9.3).";
+                readonly type: "array";
+                readonly minItems: 1;
+                readonly maxItems: 65;
+                readonly items: {
+                    readonly $ref: "#/$defs/SigmaProof";
                 };
             };
-            readonly BoardEntry: {
-                readonly title: "BoardEntry";
-                readonly description: "One leaf of a board. A leaf's hash is the RFC 9162 leaf hash of the JCS canonicalization of this object. Entries carry no time of arrival: the order is the board's, and a timestamp would hand anyone who reads the board the timing the registrar's log would need to pair a ticket with its cast.";
-                readonly oneOf: readonly [{
-                    readonly title: "CastEntry";
-                    readonly type: "object";
-                    readonly additionalProperties: false;
-                    readonly required: readonly ["kind", "cast"];
-                    readonly properties: {
-                        readonly kind: {
-                            readonly const: "cast";
-                        };
-                        readonly cast: {
-                            readonly $ref: "#/$defs/Cast";
-                        };
-                    };
-                }, {
-                    readonly title: "ReplacementEntry";
-                    readonly description: "The cast at `replaces` is no longer counted: a later cast under the same tag is.";
-                    readonly type: "object";
-                    readonly additionalProperties: false;
-                    readonly required: readonly ["kind", "tag", "replaces", "by"];
-                    readonly properties: {
-                        readonly kind: {
-                            readonly const: "replaced";
-                        };
-                        readonly tag: {
-                            readonly $ref: "#/$defs/Multibase";
-                        };
-                        readonly replaces: {
-                            readonly type: "integer";
-                            readonly minimum: 0;
-                        };
-                        readonly by: {
-                            readonly type: "integer";
-                            readonly minimum: 0;
-                        };
-                    };
-                }, {
-                    readonly title: "LifecycleEntry";
-                    readonly type: "object";
-                    readonly additionalProperties: false;
-                    readonly required: readonly ["kind", "at"];
-                    readonly properties: {
-                        readonly kind: {
-                            readonly enum: readonly ["opened", "closed", "closedEarly", "cancelled"];
-                        };
-                        readonly at: {
-                            readonly type: "string";
-                            readonly format: "date-time";
-                        };
+            readonly EncryptedOption: {
+                readonly title: "EncryptedOption";
+                readonly type: "object";
+                readonly additionalProperties: false;
+                readonly required: readonly ["ciphertext", "proof"];
+                readonly properties: {
+                    readonly ciphertext: {
+                        readonly $ref: "#/$defs/ElGamalCiphertext";
                     };
-                }, {
-                    readonly title: "ResultEntry";
-                    readonly type: "object";
-                    readonly additionalProperties: false;
-                    readonly required: readonly ["kind", "result"];
-                    readonly properties: {
-                        readonly kind: {
-                            readonly const: "result";
-                        };
-                        readonly result: {
-                            readonly $ref: "#/$defs/ElectionResult";
-                        };
+                    readonly proof: {
+                        readonly $ref: "#/$defs/DisjunctiveProof";
                     };
-                }];
+                };
             };
             readonly ElectionResult: {
                 readonly title: "ElectionResult";
@@ -1409,20 +3339,6 @@ export declare const RESPONSE_SPEC: {
                     };
                 };
             };
-            readonly ElectionId: {
-                readonly title: "ElectionId";
-                readonly description: "An election's identifier, unique within its community. A closed alphabet: it appears in the ticket class label `voter/<electionId>` and is framed into every hash a cast is bound to.";
-                readonly type: "string";
-                readonly pattern: "^[A-Za-z0-9._-]{1,128}$";
-            };
-            readonly DigestMultibase: {
-                readonly title: "DigestMultibase";
-                readonly description: "A cryptographic digest as a multibase-encoded multihash — the encoding the W3C Verifiable Credentials Data Model 2.0 defines for `digestMultibase`, and the one `did:webvh` uses for its SCID and entry hashes.\n\nMultihash carries the hash algorithm in-band, so the value is self-describing and the wire format survives an algorithm change without a schema revision; multibase does the same for the base encoding, so a verifier never infers base58 from base64url by context. A bare hex string or a `sha-256:`-style prefix hard-codes one algorithm into the wire contract and is non-conforming here.\n\nThis definition constrains the *encoding only*. What the digest is computed over is stated by each referencing field, because it differs legitimately: a digest over a JSON document is taken over its RFC 8785 (JCS) canonicalization, while a digest over an opaque artifact is taken over its bytes. A field whose input is a JSON document and which does not name a canonicalization is not reproducible.\n\nRestricted to the two multibase headers W3C Controlled Identifiers 1.0 §2.4 normatively requires — `z` (base58btc) and `u` (base64url-no-pad). CID permits others but states that \"interoperability is not guaranteed between implementations using such values\", and a registry whose purpose is interoperability should not mint digests a conforming verifier may be unable to read. The alphabets are enforced rather than assumed: base58btc excludes 0, O, I and l, and an earlier permissive pattern let three published examples carry digests that were not valid base58 at all. base58btc is RECOMMENDED, for consistency with `did:key` and `did:webvh`.";
-                readonly type: "string";
-                readonly minLength: 16;
-                readonly pattern: "^(z[1-9A-HJ-NP-Za-km-z]+|u[A-Za-z0-9_-]+)$";
-                readonly examples: readonly ["zQmbWqxBEKC3P8tqsKc98xmWNzrzDtRLMiMPL8wBuTGsMnR"];
-            };
             readonly QuestionResult: {
                 readonly title: "QuestionResult";
                 readonly description: "One question's totals. `choice`: selections per option. `ranking`: per option, how many ballots placed it at each position (index 0 = first). `score`: per option, the sum and the number of ballots that scored it. `text`: the answers, in board order, withheld (`withheld: true`) below the manifest's `textReleaseThreshold`. `abstained` counts ballots that left the question unanswered.";
@@ -1492,19 +3408,6 @@ export declare const RESPONSE_SPEC: {
                     };
                 };
             };
-            readonly Key: {
-                readonly title: "Key";
-                readonly description: "A question or option key, unique within its manifest or question.";
-                readonly type: "string";
-                readonly pattern: "^[A-Za-z0-9._-]{1,64}$";
-            };
-            readonly Multibase: {
-                readonly title: "Multibase";
-                readonly description: "A binary value, multibase base58btc over the suite's canonical (compressed) encoding.";
-                readonly type: "string";
-                readonly maxLength: 16384;
-                readonly pattern: "^z[1-9A-HJ-NP-Za-km-z]+$";
-            };
             readonly Cast: {
                 readonly title: "Cast";
                 readonly description: "A ballot and the PCS attestation that admits it (VTI-VOT-030). `attestation` is the suite's canonical encoding of the attestation made for the election point with the ballot context bound in (CONVENTIONS §3); `tag` repeats its tag so a ballot box can refuse a duplicate before the pairing check.";
@@ -1523,73 +3426,6 @@ export declare const RESPONSE_SPEC: {
                     };
                 };
             };
-            readonly Ballot: {
-                readonly title: "Ballot";
-                readonly description: "An open ballot: one answer per question of the manifest, in any order. The bytes a cast's proof binds are the RFC 8785 (JCS) canonicalization of this object as received.";
-                readonly type: "object";
-                readonly additionalProperties: false;
-                readonly required: readonly ["electionId", "manifestDigest", "answers"];
-                readonly properties: {
-                    readonly electionId: {
-                        readonly $ref: "#/$defs/ElectionId";
-                    };
-                    readonly manifestDigest: {
-                        readonly $ref: "#/$defs/DigestMultibase";
-                    };
-                    readonly answers: {
-                        readonly type: "array";
-                        readonly minItems: 1;
-                        readonly maxItems: 128;
-                        readonly items: {
-                            readonly $ref: "#/$defs/Answer";
-                        };
-                    };
-                };
-            };
-            readonly Answer: {
-                readonly title: "Answer";
-                readonly description: "The answer to one question. Exactly one member besides `question` is present, matching the question's type, or `abstain` for an optional question left unanswered.";
-                readonly type: "object";
-                readonly additionalProperties: false;
-                readonly required: readonly ["question"];
-                readonly minProperties: 2;
-                readonly maxProperties: 2;
-                readonly properties: {
-                    readonly question: {
-                        readonly $ref: "#/$defs/Key";
-                    };
-                    readonly choice: {
-                        readonly type: "array";
-                        readonly items: {
-                            readonly $ref: "#/$defs/Key";
-                        };
-                        readonly uniqueItems: true;
-                    };
-                    readonly ranking: {
-                        readonly type: "array";
-                        readonly items: {
-                            readonly $ref: "#/$defs/Key";
-                        };
-                        readonly uniqueItems: true;
-                    };
-                    readonly scores: {
-                        readonly type: "object";
-                        readonly propertyNames: {
-                            readonly $ref: "#/$defs/Key";
-                        };
-                        readonly additionalProperties: {
-                            readonly type: "integer";
-                        };
-                    };
-                    readonly text: {
-                        readonly type: "string";
-                        readonly maxLength: 4096;
-                    };
-                    readonly abstain: {
-                        readonly const: true;
-                    };
-                };
-            };
         };
     };
 };