[jack9]

> Electronic voting machines are inherently unsafe.

Nothing about a voting machine is inherently unsafe (for any purpose of the word), or we wouldn't use machines ubiquitously. They are both safe and reliable. Software is difficult to do, but we go into space anyway.

> allowing voters to check their votes were recorded properly violate anonymity requirements

Nope. Using hashes and keys is how we do it in the technical community and would work fine with voting.

> publish obfusticated votes don't actually provide useful auditability.

You're improperly lumping problems that are a combination. Some have very good solutions and one is a rather intractable problem (for machines).

Added votes

Missing votes

Misrepresented choices

Altered votes

Most of these could be handled. The issue of added votes would be something that could only be handled by serious federal criminal legislation against padding at any level (which we don't do today) because only a human is trusted to determine if a voter is another human.