Public browser tool
Verify an allocation
Every allocation records the inputs that produced it. Paste an allocation id and this page recomputes the outcome from scratch — in your browser, from public data.
Five-stage proof
How this works
- Before you buy anything, we generate a 32-byte server seed and show you sha256(server_seed). That is a commitment: we cannot change the seed afterwards without the hash changing.
- You choose your own client seed. We never pick it for you unless you ask us to.
- Each allocation uses a nonce that increases by one. The roll is HMAC-SHA256(server_seed, client_seed:nonce:draw), reduced into the odds range by rejection sampling so there is no modulo bias.
- The published odds table is hashed and frozen when the drop is published. It cannot be edited afterwards — the database refuses the write, not just the application.
- When you rotate your seed we reveal the old one, and every allocation made under it becomes checkable by anyone, forever.
Odds are stored as integer weights, never as percentages. A probability is one integer divided by another, both published, so the table sums to exactly 1 rather than to something close to it.