🔒 Lock — the list freezes and a fingerprint of a secret number is published on the spot. It can never be swapped.

🛰 The beacon — the room commits to a FUTURE tick of drand, a public randomness lighthouse. At lock time the outcome does not exist yet — not even this site can know it.

🎲 Opening dice — 2d6 from seed + beacon; under 5 auto-rerolls (logged). The accepted total = randomization rounds.

💀 Death roll — the final round reveals placements from dead last up to the winner.

📜 The ledger — every step hash-chained like a mini blockchain. No edits, no deletes, no reroll button, ever.

✅ Validate — every draw's audit page re-runs all the math in the viewer's own browser.