10.4 Ballot Arrays and Correctness