Every round's crash point is computed from a server seed committed before the round begins. The full chain of 10,000 seeds was pre-generated at service start and cryptographically committed with this genesis hash:
—
revealed seed shown at crash time.h = HMAC_SHA256(seed, "apogee-contrail-" + round) and read the first 52 bits as a BigInt.cents = floor(99 · 2^52 / (h + 1)). The crash multiplier in cents is max(cents, 100) — i.e. below 100 we clip to 1.00× (instant crash).sha256(revealedSeed) and chain sha256 forward round by round. Every step must reach the genesis above.This is the inverse-CDF variant — cleaner than the classic Bustabit (100E−h)/(E−h) ratio which has a cashout-target-dependent RTP drift. Contrail's RTP is exactly 99% at every cashout target.
Full docs: PROVABLY-FAIR.md §Contrail · HOUSE-PROTECTION.md §Contrail · GAMES.md §Contrail.