Provably fair draw verification

Before a draw closes, the app exposes only the server seed hash. When the draw is completed, it reveals the seed, stores a canonical ticket-list hash and records the winning ticket. The draw engine computes HMAC-SHA256 over draw id, ticket-list hash and timestamp, then maps the result to a ticket index.