Nobody picks the winner.

The last one left emerges from a deterministic simulation, seeded by commit–reveal, that anyone can re-run byte for byte. Every entrant has the same chance before the match starts.

1. 01
   Commit

   When a round is created the server draws a secret 32-byte seed and publishes only its fingerprint: seedCommit = sha256(seed). It can't be changed later without the fingerprint changing.

2. 02
   Lock & reveal

   When entries lock, the entrant order is fixed (qualification time, then entry id) and the seed is revealed. matchSeed = sha256(seed:roundId:orderedIds).

3. 03
   Simulate

   Everything random — the first Bag holder, every reassignment, spawn points, movement traits — derives from the match seed. Players don't steer; the avatars run on seeded AI and the server validates every tag.

4. 04
   Hash every event

   Each tag, elimination and shrink is chained: h(n+1) = sha256(h(n):event). One different event and the final hash is different.

5. 05
   Re-run, then sign

   Before anything is published the server re-simulates the whole match. Same hash and same winner, or the match is VOID. The result is signed with ed25519.

6. 06
   You verify

   Every round's fair-play page re-runs the entire match in your browser and checks it against the signed result. Or use the CLI.

# re-run any round from the repo, against the public API$ pnpm tsx scripts/verify-match.ts <round> --api https://fomotag.fun# check a commitment$ printf %s <seed-reveal> | shasum -a 256