Test Assertions for VVSG 1.1, Volume 1, Section 7.8.2, September 23, 2016

VVSG 1.1, Vol 1, Requirement 7.8.2: Approve or Void the Paper Record

a.  When a voter indicates that the paper record is to be accepted, the VVPAT voting system shall:

1. Immediately print an indication that the vote has been accepted, in view of the voter;
2. Electronically store the electronic ballot image record as a cast vote; and
3. Deposit the paper record into a secure receptacle.

b.  When a voter indicates that the paper record is to be rejected, the VVPAT voting system shall:

1. Immediately print an unambiguous indication that the vote has been rejected, in view of the voter;
2. Electronically store a record that the paper record was rejected; and
3. Deposit the rejected paper record into the secure receptacle.

c.  The VVPAT voting system shall have the capacity to be configured to limit the number of times a single voter may reject a paper record without election official intervention. The VVPAT voting system shall support limits between zero (any rejected paper record requires election official intervention) to five times, and may support an unlimited number of rejections without election official intervention.

d.  The VVPAT voting system shall have the capacity to limit the total number of paper records that a machine may reject before election official intervention is required. The VVPAT voting system shall have a default limit of three rejected paper records before election official intervention is required. The VVPAT voting system shall permit the setting of no limit, so that no number of total rejected paper records requires immediate election official intervention. 

e.  The VVPAT voting system shall have the capacity to be configured to remove any indication of the voter’s choices from the screen when the configured limit of rejected paper records per voter or per machine is reached.

f.  When a VVPAT voting system reaches a configured limit of rejected paper records per voter or per machine, it shall do the following:

1. Place the paper record that has been rejected into the ballot box or other receptacle;
2. Clearly display that a paper record has been rejected and indicate the need for election official intervention; and
3. Suspend normal operations until re-enabled by an authorized election official.

Test Assertions

TA782ai-1: IF a voter indicates that the paper record is to be accepted THEN the VVPAT system SHALL print an indication that the vote has been accepted.

TA782ai-1-1: This indication SHALL occur immediately.

TA782ai-1-2: This indication SHALL occur in full view of the voter.

TA782aii-1: IF a voter indicates that the paper record is to be accepted THEN the VVPAT system SHALL electronically store the electronic ballot image record as a cast vote.

TA782aiii-1: IF a voter indicates that the paper record is to be accepted THEN the VVPAT system SHALL deposit the paper record into a secure receptacle.

TA782bi-1: IF a voter indicates that the paper record is to be rejected THEN the VVPAT system SHALL print an unambiguous indication that the vote has been rejected.

TA782bi-1-1: This indication SHALL occur immediately.

TA782bi-1-2: This indication SHALL occur in full view of the voter.

TA782bii-1: IF a voter indicates that the paper record is to be rejected THEN the VVPAT system SHALL electronically store that the paper record was rejected.

TA782biii-1: IF a voter indicates that the paper record is to be accepted THEN the VVPAT system SHALL deposit the rejected paper record into a secure receptacle.

TA782c-1: The VVPAT voting system SHALL be capable of being configured to limit the number of times a single voter may reject a paper record without election official intervention.          

TA782c-1-1: The VVPAT voting system SHALL support limits between zero to at least five times.

TA782c-1-2: The VVPAT voting system MAY support an unlimited number of rejections without election official intervention.

TA782d-1: The VVPAT voting system SHALL be capable of limiting the total number of paper records that a machine may reject before election official intervention is required.

TA782d-1-1: The VVPAT voting system SHALL have a default limit of three rejected paper records before election official intervention is required.

TA782d-1-2: The VVPAT voting system SHALL permit the setting of no limit, so that no number of total rejected paper records requires immediate election official intervention.

TA782e-1: The VVPAT voting system SHALL be capable of being configured to remove any indication of the voter’s choices from the screen when the configured limit of rejected paper records per voter is reached.

TA782e-2: The VVPAT voting system SHALL be capable of being configured to remove any indication of the voter’s choices from the screen when the configured limit of rejected paper records per machine is reached.

TA782fi-1: When a VVPAT voting system reaches a configured limit of rejected paper records per voter, it SHALL place the paper record that has been rejected into the ballot box or other receptacle.

TA782fi-2: When a VVPAT voting system reaches a configured limit of rejected paper records per machine, it SHALL place the paper record that has been rejected into the ballot box or other receptacle.

TA782fii-1: When a VVPAT voting system reaches a configured limit of rejected paper records per voter, it SHALL clearly display that a paper record has been rejected and indicate the need for election official intervention.

TA782fii-2: When a VVPAT voting system reaches a configured limit of rejected paper records per machine, it SHALL clearly display that a paper record has been rejected and indicate the need for election official intervention.

TA782fiii-1: When a VVPAT voting system reaches a configured limit of rejected paper records per voter, it SHALL suspend normal operations until re-enabled by an authorized election official.

TA782fiii-2: When a VVPAT voting system reaches a configured limit of rejected paper records per machine, it SHALL suspend normal operations until re-enabled by an authorized election official.