Committed seed hash (published before draw):
— not committed yet —
Revealed seed:
— revealed after a verified winner —
Verify: sha256(seed) must equal the committed hash. Draw for winner slot W, round R = HMAC-SHA256(seed, "winner-W-round-R") mod (eligible pool size) → index into the frozen entrant list below, after removing already-verified winners.