Server commits first1) For each session, the server generates a secret server seed and before you play gives you its SHA-256 hash (commitment).
Reveal and verifyWhen you rotate your seed, the old server seed is revealed; match it with its hash and verify all your past rounds yourself.
Verify a roundHash the revealed server seed and compare it with the commitment published before play.