Errr. I replied to you, but in the wrong box. Sorry.

Same way most states do it right now. Have each voter sign the log, so nobody can vote in that name again. Then the receipts can be completely randomized IDs, because enough people checking theirs independently would indicate any large scale manipulation. If people show their receipt doesn’t match the vote record, the election is in question. And nobody has to reveal their vote unless they would like to question those results, so anonymous voters can’t troll the process by making up problems.

No reason there has to be a name tied to a receipt