Provable fairness

Before you open a box, our server commits to a secret seed by publishing its SHA-256 hash. You can supply (or regenerate) a client seed. When you open, the outcome is derived deterministically from those seeds plus a nonce.

After the opening, we reveal the original server seed. Anyone can re-run the math and verify the result was not picked after the fact. A CLI to verify any opening locally ships with the platform.

Full whitepaper and verifier reference coming soon.