The ballot can be public with the voter's identity encrypted so he/she can verify/change/contest it (perhaps not from their home computer but you put a kiosk in

The ballot can be public with the voter's identity encrypted so he/she can verify/change/contest it (perhaps not from their home computer but you put a kiosk in post office or something).