Draw Verification

7 steps, each one checkable against the values published below. Nothing here depends on trusting us — every input is shown.

python3 -c "import hashlib; print(hashlib.sha256('legion-draw-v1:pool_freeze:7c7fe622cf8917a5c59b5c80a70401d3da854ae57b2257cfb0af54429223f171:52db9ba70e0cc0f6eaf7803dd07447a1f5477735fd3f661792ba94600c84e971:32491622'.encode()).hexdigest())"

python3 -c "import hashlib, json, urllib.request; r = json.load(urllib.request.urlopen('https://api.drand.sh/52db9ba70e0cc0f6eaf7803dd07447a1f5477735fd3f661792ba94600c84e971/public/32491622')); print(hashlib.sha256(bytes.fromhex(r['signature'])).hexdigest())"

1. Confirm sha256(draw_secret) equals the commitment hash in step 1.
2. Confirm the sha256 of the entry pool below equals the pool hash in step 3. Hash the text exactly as shown — ticket numbers in ascending numeric order, separated by commas, with no spaces and no trailing newline.

   Entry pool — ticket numbers in ascending numeric order

   6,10,16,19,20,23,24,26,37,39,44,49,50,53,71,74,79,105,106,109,110,112,120,121,123,141,142,148,169,171,174,176,178,179,183,186,189,193,205,213,215,216,218,220,222,239,242,245,256,257,264,267,268,270,283,286,299,304,306,309,315,316,320,325,326,330,334,336,338,339,349,354,356,360,361,380,386,388,397,400,402,407,421,427,429,432,433,434,441,463,466,468,475,506,509,510,522,523,527,530,545,548,558,577,589,590,592,593,597,607,612,619,632,637,638,652,658,667,668,669,677,680,681,682,683,692,697,698,705,706,709,719,729,733,734,742,747,748,751,753,754,756,758,762,768,771,772,780,784,788,800,801,817,818,829,832,841,844,848,856,865,873,885,889,892,893,919,921,929,931,932,935,940,941,952,960,964,965,967,977,978,983,988,989,992,994,995,998,1005,1021,1024,1036,1038,1048,1049,1052,1055,1060,1066,1071,1073,1083,1087,1093,1096,1100,1116,1119,1126,1128,1130,1139,1140,1143,1145,1158,1160,1161,1178,1199,1201,1212,1218,1233,1235,1252,1256,1259,1297,1301,1302,1303,1309,1311,1316,1342,1344,1347,1353,1357,1359,1360,1363,1364,1368,1369,1373,1386,1387,1397,1400,1403,1407,1413,1423,1427,1428,1429,1430,1432,1440,1443,1455,1462,1463,1472,1475,1477,1486,1487,1500,1501,1511,1516,1524,1527,1536,1547,1551,1553,1557,1558,1562,1569,1583,1589,1591,1598,1601,1603,1606,1619,1626,1633,1634,1636,1644,1645,1647,1650,1666,1681,1690,1703,1705,1713,1714,1726,1733,1740,1741,1747,1748,1751,1754,1770,1776,1783,1785,1791,1798,1804,1805,1809,1814,1817,1827,1830,1831,1838,1840,1844,1848,1856,1858,1861,1862,1866,1867,1869,1877,1879,1883,1884,1889,1897,1906,1909,1910,1914,1916,1918,1929,1930,1935,1937,1947,1952,1955,1962,1970,1979,1988,1989,1995,2004,2005,2006,2009,2021,2033,2034,2040,2044,2051,2054,2063,2064,2078,2086,2100,2122,2131,2151,2154,2158,2163,2171,2172,2173,2177,2183,2185,2191,2195,2201,2208,2224,2236,2250,2253,2255,2260,2270,2281,2287,2288,2289,2290,2298,2300,2302,2305,2306,2315,2332,2339,2344,2345,2346,2348,2356,2363,2367,2369,2386,2394,2399,2404,2407,2422,2423,2431,2432,2442,2443,2450,2455,2457,2472,2477,2487,2488,2496
3. Run the pre-filled command below to reproduce the beacon-seeded rejection-sampling winner index (counter=?, expected winner_index=235). This folds in the drand beacon randomness from the step above alongside the draw secret and pool hash, so the winner could not have been known until that round resolved.
   Copy

   python3 - <<'PY'
   import hashlib
   draw_secret = '43796fea7e72d983a256fd6f6c0c078e27352d449d245b40dc8f5e09659b93bc'
   pool_hash = '7c7fe622cf8917a5c59b5c80a70401d3da854ae57b2257cfb0af54429223f171'
   beacon_randomness = '36246fc10684e2c77b7f4170687f9454392edddf7da02820ef019388e4c5e28b'
   total_entries = 444
   counter = 0
   limit = (1 << 256) - ((1 << 256) % total_entries)
   while True:
       seed = hashlib.sha256(f'legion-draw-v1:draw:{draw_secret}:{pool_hash}:{beacon_randomness}:{counter}'.encode()).digest()
       candidate = int.from_bytes(seed[:32], 'big')
       if candidate < limit:
           print(f'counter={counter} winner_index={candidate % total_entries}')
           break
       counter += 1
   PY

All sold tickets with entry method (no personal names). This competition had no engagement question, so the file carries no answer column. Download it to cross-reference ticket numbers against the draw pool; the "In Main Draw" column marks which rows formed it.

Each commitment hash is anchored to the Bitcoin blockchain via OpenTimestamps. A confirmed proof establishes the hash existed before the Bitcoin block that attests it — checkable without trusting our records. Save the commitment hash to a file and check the proof with the free ots tool: printf '%s' 'COMMITMENT_HASH' > commitment.txt && ots verify -f commitment.txt proof.ots