In SERVER mode every outcome is decided server-side from
HMAC-SHA256(serverSeed, clientSeed:nonce) — committed by the hash above before you spin.
Rotate to reveal the old seed, then recompute any spin in the
VERIFIER.
DEMO mode plays locally and is not provably fair.