Vote integrity
Votes decide who plays, so farming them is worth something — which means the defences have to be real rather than decorative.
- One Google account, one vote per session. Enforced by a database constraint, not by application logic a race can slip past.
- Per-network and per-device ceilings. Configurable per session, and enforced against recorded votes rather than a counter that resets.
- Every vote is recorded with its network, device and account age. Farming is caught by clustering, not by any single vote looking wrong.
- Admins can disqualify in bulk. A whole cluster can be thrown out in one action, and every count is recomputed immediately — the standings always reflect only votes that still stand.
- Once slots are allocated, counts are frozen. Quietly changing the numbers behind a published result would make it untraceable.
Honest limitation. Google accounts are free, so no measure makes farming impossible — these raise its cost and make it visible. Suspicious sessions are reviewed, and disqualifications are logged with a reason.