Film & Stage
Voting
The integrity conditions that any future Film & Stage Awards ballot would have to satisfy before a single vote could be cast.
Voting framework state: Not established
There is no voting system, and no electorate.
There is no Film & Stage Awards voting system. No electorate exists, no voter has been approved, no ballot has been opened and no voting technology has been chosen. What follows describes the integrity conditions any future ballot would have to satisfy — not a system in operation.
No vote total, percentage, leaderboard, trend, partial tabulation, projection or indication of who is ahead will ever appear on this website, at any stage, in any form — including in page content, metadata, structured data, preloaded state, caches or analytics.
Six conditions, held together.
- Eligible voters
Only a person holding an approved voting status for a specific Awards cycle could ever reach a ballot. Eligibility is granted under the adopted rules, recorded per cycle, and never inherited from a subscription, a purchase, a public account or a presence in any other Film & Stage property.
- Secure access
Access to a ballot would require verified identity and strong authentication, including multi-factor enrolment, expiring sessions and a single-use handoff. A public-site login would never be sufficient to vote.
- Confidential ballots
A voter's choices belong to the voter and to the sealed ballot. Individual selections remain inside the independent balloting environment and are not held by this website.
- Independent administration
The ballot would be conducted by an independent specialist provider operating an environment separate from this website, integrated only through a defined and minimal boundary.
- Separation of duties
Voter eligibility, the ballot platform, sealed results and authorised release are distinct governed functions. No ordinary administrator holds them all, and platform access confers authority over none of them.
- Accounting oversight
An independent accounting function is intended to sit alongside the ballot in a procedural role — never as an artistic decision-maker, and never as a substitute for the governance framework.
Who votes has not been decided.
Who votes has not been decided. Whether the Film & Stage Awards will have voter classes, professional branches, a membership requirement, invited electors or some combination is a governance question that has not been settled. The architecture is deliberately written to accept whatever policy is adopted, rather than to presume one.
Membership of, or verification within, Film & Stage Network — or any other Film & Stage property — never creates a right to vote in the Film & Stage Awards. Professional identity may one day help establish who a person is; voting eligibility is a separate status, granted only under the adopted governance and rules framework and revocable on its own terms.
A voting status, recorded per Awards cycle.
Entitlement is recorded category by category. Different voters may be eligible in different categories if the eventual rules require it, and no one is presumed entitled to a category simply because they hold a voting status.
- Not established
No voting status exists. This is the state of every person today.
- Proposed
A status has been put forward under the adopted rules and awaits review.
- Under review
Identity, standing or conflicts are being examined. Nothing is granted yet.
- Eligible
A voting status is active for a named Awards cycle, subject to category entitlement.
- Restricted
Voting stands, but one or more categories are out of reach — usually through a declared interest.
- Suspended
Voting is temporarily withheld while a matter is resolved.
- Revoked
The status has been withdrawn and cannot be used.
- Lapsed
The status was time-limited and its period has ended.
The voter model carries recusal, restricted category access, temporary suspension and conflict review as first-class states, linked to the governance register of interests. No conflict rule or threshold has been adopted; the architecture exists so that the eventual rules can be enforced rather than merely stated.
Establishing who a person is.
- Canonical Film & Stage identity
A single authoritative person record, so that one professional is never represented twice in an electorate.
- Professional verification
Evidence of professional standing, considered during review. Evidence is not entitlement.
- Identity check
Confirmation that a person is who they claim to be, conducted to a standard set by security review.
- Organization validation
Confirmation that a company or body, and the person acting for it, are genuine and authorised.
- Multi-factor enrolment
Enrolment of a second factor before any ballot access is possible.
No identity, verification or authentication provider has been selected. Any such appointment would follow a security review, and would be published as part of the governance record rather than adopted quietly.
Access that is worth trusting.
- Multi factor authentication
- Session expiry
- Single use handoff
- Credential revocation
- Device and session review
- Rate limiting and anti automation
- Anti phishing guidance
- Voting through an emailed link alone, with no second factor
- Shared, transferable or reusable ballot credentials
- Ballot access from an ordinary public-site session
- Any credential recovery path weaker than the credential it restores
Because a ballot is a target, voters would be told plainly where a genuine ballot begins, that Film & Stage will never ask for a ballot credential by email, message or telephone, and how to report anything that appears to imitate the Awards.
An independent ballot, behind a narrow boundary.
The boundary is defined by what may cross it. Anything not required to conduct the authorised ballot does not cross — and the fields the website is capable of sending are the whole list, not a starting point.
- An environment operated separately from this website
- Verification of voter identity and eligibility at the point of access
- Enforcement of per-category entitlement, not universal access
- Multi-factor authentication, session expiry and single-use access
- End-to-end ballot confidentiality with no re-identification of choices
- Complete audit logging of access, excluding vote choices
- Demonstrated accessibility to recognised standards
- Independent security assessment before any live ballot
- Full keyboard operation, with no mouse-only interaction
- Screen-reader support with correctly labelled controls and clear error handling
- No dependence on inaccessible custom graphics to cast a ballot
- Sufficient contrast, resizable text and reduced-motion respect
- Usable on a phone as well as a desktop computer
- A route to request reasonable accommodation without disclosing a voter's choices
- A ballot-scoped voter identifier, not a canonical person record
- Eligibility status for the cycle
- Category entitlements for that voter
- The Awards cycle the ballot belongs to
- A single-use, short-lived authentication reference, where appropriate
- Marketing, commercial or subscription data
- Profile content, contact history or correspondence
- Data from other Film & Stage properties
- Anything not required to conduct the authorised ballot
- Individual ballots and selections
- Vote totals, percentages or distributions
- Partial, interim or provisional counts
- Anything indicating who is ahead
Leaving here, plainly.
A ballot could open only where three conditions hold together: an approved voter, an approved Awards cycle, and an authorised voting period. No clock, no page and no administrative convenience may substitute for any of them. No voting period exists and no date has been set.
A voter would leave this website deliberately and visibly, told in plain language that they are entering a secure voting environment operated independently. The handoff is single-use and time-limited, this website does not imitate the provider's interface, and no ballot is ever embedded to look as though it belongs here.
On return, this website may learn only that a ballot was completed. It does not receive the ballot, the categories voted, the order of voting or anything from which a choice could be inferred.
A voter would see a plain, non-revealing confirmation — Ballot submitted — and nothing more. A receipt never displays selections, and never carries data that could be used to reconstruct or prove them.
Individual ballots remain inside the independent balloting environment. The Film & Stage application layer does not store a voter's choices, and would only ever do so if a formally approved system specifically required it under the adopted rules and security review.
No one holds all of it.
No single ordinary administrator may hold voter eligibility, the ballot platform, sealed results and result release at the same time. These are separate governed functions, and platform or ownership access confers none of them.
- Eligibility administration
May
- Maintain voter eligibility records under the adopted rules
- Record entitlement and restrictions
May not
- Reach the ballot platform
- See ballots, counts or sealed results
- Authorise a release
- Identity verification
May
- Record verification steps and their outcome
May not
- Grant a voting status
- Assign category entitlement
- Reach any ballot data
- Ballot platform administration
May
- Operate the ballot environment within the appointed provider's terms
May not
- Alter voter eligibility
- Hold sealed results
- Authorise a release
- Accounting oversight
May
- Perform procedural verification and tabulation oversight under a formal engagement
May not
- Select nominees or recipients
- Change a ballot
- Announce a result
- Result custody
May
- Hold sealed results under the governed custody arrangement
May not
- Authorise publication
- Alter eligibility
- Operate the ballot platform
- Result release authority
May
- Authorise publication of a result, explicitly and category by category
May not
- Administer eligibility
- Operate the ballot platform
- Alter a sealed result
- Governance authority
May
- Adopt the framework, oversee material transitions and review incidents
May not
- Vote by virtue of the function
- Reach individual ballots
- Security review
May
- Assess providers, controls and incidents, and require remediation
May not
- Grant eligibility
- Reach ballots or sealed results
Accounting oversight, and its limits.
Capital Directors is designated for intended accounting oversight only. Under a formal engagement it may later take part in tabulation oversight, result custody and procedural verification. It is not an artistic decision-maker, it does not select nominees or recipients, and it has not counted, certified or audited any ballot — no Film & Stage Awards ballot has been conducted.
When something goes wrong.
- Suspicious access
Unusual access patterns are investigated before, not after, a ballot is affected.
- Account compromise
A compromised credential is revoked and re-established under verification.
- Provider outage
An interruption in the independent environment is recorded and communicated.
- Voting interruption
A pause, extension or resumption is published rather than absorbed silently.
- Credential reset
Reset paths are no weaker than the credential they restore.
- Security review
A review may be opened at any time and may halt a ballot.
No incident policy has been adopted. The architecture records these events so that an adopted policy can act on them; it does not itself decide what response any event requires.
Auditable, without ever reading a ballot.
Eligibility assignment, verification, authentication events, ballot handoff, completion status and administrative changes are auditable. Vote choices are not recorded, and the audit model has no field able to hold one.
Voting analytics may never reveal an individual's artistic choices. Marketing and product analytics have no place inside the secure ballot environment, and no third-party tag, pixel or session-recording tool may be present there.