Check a result

Before a spin settles, the server draws a 64-character hexadecimal server seed and publishes SHA-256 of that text (UTF-8, lowercase hex). That hash is the commitment.

The ticket is HMAC-SHA256. The key is the server seed and the message is client seed:nonce. Take the first 13 hex digits (52 bits). The ticket is that integer modulo the total weight of the active segments used for the spin. Walk the segments in order until the cumulative weight exceeds the ticket.

This page recomputes the hash and ticket in your browser. The server seed you type is not sent back. If you also enter a spin ID, the page loads the published values for comparison.