Aren't paper receipts designed for:
- Visual verification by the voter (and then)
- Placement in some kind of secure receptacle for the purpose of a later recount
It seems like a terrible idea to actually give the voter the receipt. How could an accurate recount be made if voters are allowed to leave the polling place with the receipt? (Some would be lost, some would be forged, etc). Instead, I thought the purpose of the paper receipts was for visual verification (essentially, adding another "db" in your example, but this "db" is verifiable without a computer by human beings), and subsequently the possibility of having a human-only recount, or a recount performed by an optical reader manufactured by some disinterested third party. This would make it much harder to fake a vote (having to fake both the computerized record and the physical record which is voter verified).
