ArenaGammon
Dice Fairness Statement

Dice generated independently from the board and verifiable by proof.

ArenaGammon dice are produced through a cryptographic flow that is independent from the game position. Each roll is calculated from the next pre-committed server seed, a client seed generated by the player's browser, and fixed match context. The same proof can be used later to reproduce and verify the result.

1. Pre-Commitment

At the start of a game, 1000 secret seeds are generated. A SHA-256 hash is created for each seed and written to the public commitment list.

2. Order Cannot Be Chosen

When dice are requested, the system uses the next commitment in sequence. Choosing a different seed, skipping a seed, or manually setting a result leaves evidence in verification.

3. Player Contribution

The player's browser generates a client seed for each dice request. The result is affected not only by the server seed, but also by this random contribution from the player side.

Dice Proof Verifier

The core claim is not only that past dice cannot be changed; it is that dice come from a board-position-independent and auditable cryptographic flow. Algorithm name: ag-provably-fair-v1-hmac-sha256-chain. No external service is called at roll time for speed. A KMS signature layer is a planned next security step to lock the commitment chain even more strongly.