Verify every draw

Before you buy, we publish the SHA-256 hash of our secret server seed. Your account has a client seed you can change at any time; it is snapshotted onto your order when you pay. Your draw result is HMAC-SHA256(server seed, "client seed:nonce"), mapped to the published odds table with rejection sampling (no modulo bias). When a server seed is rotated, the raw seed is revealed so anyone can verify every historical draw. Out-of-stock fallback: if the drawn product sold out between purchase and draw, we re-run the selection over the remaining in-stock outcomes with weights renormalized, using the next nonce, and record the excluded products on the draw. If nothing remains in stock, the order is refunded in full to the payment method.