KEYS

Reveal & randomness

Payment and reveal are distinct steps; the class is drawn only after the mint confirms.

Payment and reveal are distinct steps. The class is drawn from verifiable randomness only after the mint transaction confirms, so no participant and no operator can simulate or influence a result before paying.

• Commit: the mint transaction records the key id and the block it settled in. No class exists yet.
• Seed: a seed is derived from a future block hash the minter cannot know or grind at payment time, combined with the key id.
• Reveal: once that block is final, anyone can call reveal for the key. The contract maps the seed onto the published odds and writes the class permanently.

Reveal is permissionless and idempotent: a key can be revealed by its holder or by anyone else, and the outcome is identical because the seed is already fixed on-chain.