1. The commitment. Before you play, the bot publishes the Hash — SHA256(secret). It cannot change the secret afterwards without the hash mismatching.

2. Your input. You choose your own Seed (!seed set). Since the bot doesn't control it, it cannot pre-craft outcomes.

3. The result. Every bet computes HMAC-SHA256(serverSeed, clientSeed:nonce). For Coinflip: byte 0 even → heads, odd → tails. The nonce increases by 1 with each bet.

4. The reveal. When you rotate (!seed rotate), the old Secret is revealed. This page recomputes everything locally: the hash must match the commitment, and each result must match what you were paid.

Trustless: open this page's source code (Ctrl+U) — the math runs entirely in your browser using the Web Crypto API. Our server is not involved.