Trust, but verify.

Each round commits a SHA-256(server_seed) hash before play. The seed is revealed after — recompute the outcome yourself.