Recompute your own pull

Before a run opens

We publish a list of every card in the pool with its cert number, then a SHA-256 hash of that exact file. We also publish the hash of a random seed, keeping the seed itself secret. Both go up before a single pack sells, so neither can be changed afterwards without the hashes failing.

When you open a pack

Your draw is derived from the secret seed, your order number, and a sequence number that increases with every purchase. The card comes from your eligible range sorted by cert number, picked with rejection sampling so the odds are flat rather than slightly favouring the low end.

After the run closes

We publish the seed, the full manifest, and the order in which every pack was bought. That last one matters: what was still available changes with every pull, so you need the sequence to replay it. With those three files you can recompute every draw in the run, including your own.

Check it without trusting our code

The verifier is a short script that reads only the published files. It confirms the manifest still hashes to what we committed, the seed hashes to its commitment, the sequence has no gaps, and every draw comes out where we said it did.

If any of that fails, it says so and exits with an error. That is the point. A verifier that passes everything is the same as no verifier.