> software displays that you voted for candidate
This enables coercion of voters. It must be impossible to attribute any vote to any specific person.
> software displays that you voted for candidate
This enables coercion of voters. It must be impossible to attribute any vote to any specific person.
this is out of context, nobody would see who they have voted for in practice
> At any later time you can check with an independent device and look at the transaction finding out that it was altered
This implies there is a record establishing a relationship between person A and vote X.
The fact most people won't bother to check it in practice is irrelevant. It must be impossible, because otherwise people are going to die.