# QIP-2 receipts

Sign the frozen package's typed ballot for https://quotum.org/governance on chain 4663. Check the voter, proposal hash, manifest hash, B, choice, deadline and nonce. A ballot signature transfers nothing and needs no gas. Do not provide a private key to any site or operator.

The collector accepts valid ballots only on [V,D), with D=V+2h. Save the exact signed acceptance receipt. A submitted ballot without an acceptance receipt is not proof of collection. Replacements follow conflicts.md. No new late vote is accepted during objections or proof checking.

The collector preserves one durable append-only receipt log and signs its head with the policy's pinned Ed25519 public identity. The custodian on a separate host verifies signatures, manifest, log continuity and recounts. Retain immutable snapshots at least every 15 minutes, at D and at final review. Publish public evidence and failures. A background job or private local copy alone is not independent public evidence.

Publish a close commitment only after D, then a separate final commitment only at or after F = D+2h after all evidence gates pass, even when the tally is unchanged. These are two distinct transactions with different close and final prefixes. The final checkpoint must be fresh at or after F and follow completed objection review, independent public evidence and the B hash and finality checks. F alone does not finalize anything. An accepted correction pauses finalization pending separate review and an independently reproduced corrected tally.

A matching on-chain commitment authenticates bytes, not economic correctness. A passed QIP-2 is executed only under its activation rule and checks, with execution receipts or a specific refusal.