[ID_02] votesecure

Problem

A simple voting form is easy to write and easy to abuse. One person can vote many times and there is no way to audit the result later.

Decision

I put every ballot behind an authenticated session and enforced one vote per user at the database level with a unique constraint, not just in the UI. The tally is derived from the ballots table, so the count and the record can never disagree.

Tradeoff

Requiring sign-in raises the bar to participate. For a trustworthy count that is the right trade, but it does cut casual turnout.