PUBLIC

PUBLICTRANSPARENCY

How Bantay Oriental Mindoro gathers, protects, and proves the integrity of every verified response — without exposing who each participant selected.

METHODOLOGY

How Responses Are Gathered

Voluntary Participation

Participation is open to any verified Filipino citizen who completes identity and mobile verification. Responses are self-selected, not a probability sample.

Geographic Stratification

Each accepted response is tagged with an approximate region to enable geographic breakdowns. Exact addresses are never stored on the public ledger.

One Person, One Response

A server-side eligibility record ensures each verified participant contributes at most one accepted response per vote version.

Raw vs. Weighted

Live results show raw verified participation. Methodology-adjusted estimates will be published only after a documented sampling methodology is independently reviewed.

Methodology warning: Raw voluntary-app participation is not automatically representative of the Philippine electorate. These are independent vote results, not official election results.

AUDIT PROCESS

How Integrity Is Proven

Append-Only Ledger

Every accepted submission appends a cryptographically hash-chained event. Earlier events cannot be silently edited.

Commitment Proofs

A response commitment hash proves a submission existed and is unchanged — without revealing the candidate selection.

Merkle Checkpoints

Ledger events are batched into Merkle checkpoints that can be independently verified at scale.

Public Verification

Any receipt can be verified against the ledger via the Integrity Explorer — by anyone, at any time.

Reconciliation

Aggregate counters are periodically recomputed from authoritative accepted records. Discrepancies raise an integrity alert.

PRIVACY BY DESIGN

Separated Domains

Identity and candidate choices are stored in separate, access-controlled domains.

Pseudonymous Tokens

Vote responses are linked to a random response token — not your identity.

Verify Without Exposing

Receipts prove a valid response existed without revealing the selection.

Append-Only History

Revocations and corrections are visible audit events — nothing is silently deleted.

Open Integrity Explorer

Vote submissions are not official election ballots.