This ball's outcome is provably fair. When the session started, a
random seed was committed onchain. Every ball in this session is derived
deterministically as SHA256(sessionSeed ‖ ballIndex) — so
given the session tx (visible to anyone), you can replay the exact
physics and confirm the result wasn't tampered with. No server trust.