Sealed entries. Verifiable winner.

Ticket counts encrypted on commit. Winner selection verifiable — but pre-draw counts stay sealed to prevent collusion.