Draw verification

Principle

Before ticket sales open, the server generates a secret random seed and publishes only its SHA-256 fingerprint. Once sales close, the seed is revealed: anyone can check that it matches the published fingerprint, then recompute the winners from the list of tickets.