FreeAndFair/Tabulator
The Free & Fair Tabulator tallies digital Cast Vote Records, specified in an open JSON-based format, into an election result. The Tabulator is formally specified in BON and Coq, and is implemented via extraction to Haskell from Coq and in SPARK.
CoqNOASSERTION