A provably-fair wheel. Every spin is computed from a seed we committed to before you played — and you can recompute every one yourself, right here in your browser.
◷ DEMO · real keys, real spins, real proof · NO real money
1 · Get a sandbox key & a commitment
POST /v1/keys → POST /v1/commitments
your sandbox key:
commitment id:
published commitment (SHA-256 of the secret seed):
This hash was published before any spin. The secret seed behind it cannot be changed now — that is the promise. Spin away, then reveal it and check.
2 · Spin the wheel
POST /v1/draws · space = {kind:"int", min:0, max:36}
Each spin's #number is its nonce — the coordinate you verify it by. The first spin is #1, not #0.
3 · Reveal & verify — in YOUR browser
POST /reveal → recompute every spin locally (no server trusted)
Revealing ends this round — the seed is now public. Start a new round for a fresh committed seed and spin as many as you like before revealing.
revealed server seed:
does sha256(seed) == the commitment we published first?
Each spin above now shows ✓ — recomputed from the seed in your browser with HMAC-SHA256, matching what the server returned. Nothing was trusted; everything was checked.
Open the raw audit packet →
The same offline verify() ships in JavaScript, Python, Go, C#, PHP, Java, Ruby and Perl — so a customer's own players can check spins in their own stack. Curious how it all fits together? Read the overview →