Sensus satisfies all three parts of the accuracy property well. While it is possible to alter, eliminate, or add votes, any such behavior is detectable. Voters whose votes have been altered or eliminated from the final tally can discover the problem by examining the tallier's published list. These voters can submit their receipts anonymously along with their ballots and decryption keys to protest the election results and have them corrected. The only party that can add invalid votes to the final tally is the tallier. These can be detected by any party who checks the authenticity of the validation certificates for all ballots; the final tally can then be corrected.