API and public log

The Go service, the database, and the append-only hash chain a reviewer can follow.

The API is written in Go, with Postgres for the running system and a memory store for tests. Decision artefacts go onto an append-only hash-chained log. Blobs that do not belong in the log are addressed by their hash. Metrics are exposed for Prometheus, and Docker Compose profiles cover a deploy.

The protocol next to it pins the contract: OpenAPI 3.1, JSON Schema for procedure packs, and the Mode B suite publicvoting-modeb-v1 with test vectors. Ed25519 authenticates the device. A hybrid seal (X25519, HKDF-SHA256, AES-256-GCM) closes the ballot. Shamir shares split the tally. Argon2id is used for recovery verifiers. None of that is a general-purpose blockchain. It is a public log for these decisions.

Public log

0xA1… Decision opened
0xB7… Membership closed
0xC4… Tally published

The public log: an append-only chain, with each decision artefact in order.

publicvoting-protocol

Mode B

A contract with test vectors

OpenAPI, procedure packs, and the cryptographic suite, pinned so a reviewer can rerun them.

The protocol is published, including test vectors.

Want something in this family? Start a conversation. The price is agreed there, not on a rate card.

CPT Software

Bespoke software engineering for organisations that need systems built to fit. Part of the CPT Technologies group.

Services Portfolio About Contact