Provably fair verification

Recomputed entirely in your browser with Web Crypto. Tile i is safe iff HMAC-SHA256(serverSeed, clientSeed:nonce:i)[0:8] / 2³² < p.