The same uvLottery v3 draw, two trust tiers. In-browser 🟡 runs on this page and is honestly 🟡:
the proof that the commitment preceded the round rests on the page's word. Anchored 🟢 routes through a
backend that timestamps the commitment at ×2 independent RFC-3161 TSAs before the round — genuine 🟢
(uvLs §5.4).
In-browser: the draw runs entirely on this page — no server.
Free entry, deterministic outcome. Click run.
§5.4 commitment-anchor (RFC-3161)
commitment—
future drand round R—
RFC-3161 anchors —
§5.4 — stamped before R?—
OTS second anchor—
Your entry
—
—
By outcome — click to list them
The proof — seed, drand round, and how to re-derive
serverSeed (committed before the round; revealed after) —
Each entry's rank = SHA-256(combinedSeed : id), sorted high→low; the
published pool is dealt onto that order. One seeded permutation — same input → same list, anywhere.
re-derive with an independent verifier (no shared code — all reproduce the same list):