Provably-fair · pay-per-use NockApp · demo

Forfeit Flip

Provably-fair coin flip — even money, recomputable by either party.

Outcome construction (public)

outcome = lowbit( H(serverSeed ‖ clientSeed ‖ nonce) ) → 0 = house, 1 = player

Forfeit Flip — round #0

demo · no real NOCK

1House commits

The house locks a secret serverSeed by publishing only its hash. The seed itself stays hidden — the peek surface is commitment-only.

2Player commits

Before any seed is revealed, the player locks their own clientSeed. Neither side can see the other's seed, so neither can bias the result.

Reveal & recompute

Complete both commitments, then reveal — the outcome is lowbit(H(serverSeed ‖ clientSeed ‖ nonce)) and is recomputed live in your browser.

Earned trust badge

Signed Ed25519 issuance receipt over the lab report snapshot b61ea88c49baa5f3. Freshness: fresh.

Verify badge

Launch evidence

Readiness verified · score 97. Lab report → case → readiness report → badge.

Open case

Settlement residual (honest)

Fairness and forensics are fully trustless. Settlement is bonded-cooperative + timeout-forfeit (HTLC-grade), not contract-grade forced payout — Nockchain consensus cannot gate a payout on the game outcome. Disclosed in docs/FAIRNESS-DOSSIER.md.

This is the fairness and forensics showcase: the commit-reveal flow and the verifier run entirely in your browser and no real NOCK changes hands. Real-NOCK play is gated behind a house wallet, fakenet end-to-end testing, and the disclosed settlement model.