; and (2) under which, if the reported outcome of the election is incorrect, there is at least a predetermined percentage chance that the audit will replace the incorrect outcome with the correct outcome as determined by a full, hand-to-eye tabulation of all votes validly cast in that election that ascertains voter intent manually and directly from voter-verifiable paper records. (c) Requirements for rules and procedures The rules and procedures established for conducting a risk-limiting audit shall include the following elements: (1) Rules for ensuring the security of ballots and documenting that prescribed procedures were followed. (2) Rules and procedures for ensuring the accuracy of ballot manifests produced by election agencies. (3) Rules and procedures for governing the format of ballot manifests, cast vote records, and other data involved in the audit. (4) Methods to ensure that any cast vote records used in the audit are those used by the voting system to tally the election results sent to the chief State election official and made public. (5) Procedures for the random selection of ballots to be inspected manually during each audit. (6) Rules for the calculations and other methods to be used in the audit and to determine whether and when the audit of an election is complete. (7) Procedures and requirements for testing any software used to conduct risk-limiting audits. (d) Definitions In this part, the following definitions apply: (1) The term ballot manifest means a record maintained by each election agency that meets each of the following requirements: (A) The record is created without reliance on any part of the voting system used to tabulate votes. (B) The record functions as a sampling frame for conducting a risk-limiting audit. (C) The record contains the following information with respect to the ballots cast and counted in the election: (i) The total number of ballots cast and counted by the agency (including undervotes, overvotes, and other invalid votes). (ii) The total number of ballots cast in