Before any round begins, its outcome is already fixed: seeds come from a pre-generated
SHA-256 hash chain consumed backward, and each round's seed hash is published before
betting opens. The crash point is
max(1.00, floor(100·0.97/(1−U))/100) where U is the first 52 bits of
HMAC-SHA256(seed, "moonshot:<round>"). After the crash, the seed is revealed —
verify any round below, entirely in your browser. Hardening note: a production deployment
would additionally salt the HMAC with a public value chosen after chain generation (e.g. a
future Bitcoin block hash) to prove the operator couldn't have selected a favorable chain.
Current chain head: …