Couldn't you digitally sign the source code of these machines and have that verified by officials? Inspection as well. You could stuff a ballot box without the machine if there's no oversight.