Tally votes at submission time — no reveal phase needed

Server extracts voteChoice from the witness transiently during proof
verification and increments the aggregate tally. The choice is never
persisted per-vote — only tally.json totals. Results show real-time
per-choice counts without requiring voters to return and reveal.

The reveal endpoint still works as a fallback for votes submitted
without a witness (proof-only path), but the primary flow is now:
create -> vote -> see live results.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Author: stackdump

internal/server/polls.go

@@ -307,6 +307,15 @@ func (s *Server) handleCastVote(w http.ResponseWriter, r *http.Request) {
 		return
 	}
 
+	// Tally at vote time — extract choice from witness (seen transiently, never persisted per-vote)
+	if choiceStr, ok := req.Witness["voteChoice"]; ok {
+		choice := 0
+		fmt.Sscanf(choiceStr, "%d", &choice)
+		if choice >= 0 && choice < len(poll.Choices) {
+			_ = s.store.IncrementTally(pollID, choice)
+		}
+	}
+
 	w.Header().Set("Content-Type", "application/json")
 	json.NewEncoder(w).Encode(map[string]string{"status": "accepted"})
 }
@@ -487,7 +496,7 @@ func (s *Server) handlePollResults(w http.ResponseWriter, r *http.Request) {
 			choiceTallies[i] = tally.Counts[fmt.Sprintf("%d", i)]
 		}
 		result["tallies"] = choiceTallies
-		result["revealedCount"] = tally.RevealedTotal
+		result["talliedCount"] = tally.RevealedTotal
 	}
 
 	w.Header().Set("Content-Type", "application/json")

internal/store/polls.go

@@ -286,6 +286,14 @@ func (s *FSStore) tallyPath(pollID string) (string, error) {
 	return filepath.Join(s.pollDir(), clean, "tally.json"), nil
 }
 
+// IncrementTally adds one vote to the aggregate tally for a choice.
+// The tally file only contains totals — no link to individual voters.
+func (s *FSStore) IncrementTally(pollID string, choice int) error {
+	s.mu.Lock()
+	defer s.mu.Unlock()
+	return s.incrementTally(pollID, choice)
+}
+
 func (s *FSStore) incrementTally(pollID string, choice int) error {
 	path, err := s.tallyPath(pollID)
 	if err != nil {

public/poll.js

@@ -453,10 +453,10 @@ async function loadResults(pollId) {
         const choices = data.choices || [];
         const voteCount = data.voteCount || 0;
         const tallies = data.tallies || null;
-        const revealedCount = data.revealedCount || 0;
+        const talliedCount = data.talliedCount || 0;
         const barsDiv = document.getElementById('results-bars');
 
-        if (tallies && revealedCount > 0) {
+        if (tallies && talliedCount > 0) {
             // Show real tallies from revealed votes
             const maxVotes = Math.max(...tallies, 1);
             barsDiv.innerHTML = choices.map((c, i) => {
@@ -490,12 +490,8 @@ async function loadResults(pollId) {
         }
 
         let statusText = `${voteCount} total votes \u00b7 ${data.status}`;
-        if (revealedCount > 0) {
-            statusText += ` \u00b7 ${revealedCount}/${voteCount} revealed`;
-        } else if (voteCount > 0 && data.status === 'closed') {
-            statusText += ' \u00b7 awaiting reveals';
-        } else if (voteCount > 0 && data.status === 'active') {
-            statusText += ' \u00b7 choices hidden until poll closes';
+        if (talliedCount > 0 && talliedCount < voteCount) {
+            statusText += ` \u00b7 ${talliedCount}/${voteCount} tallied`;
         }
         document.getElementById('results-total').textContent = statusText;