Trap positions are derived server-side from HMAC_SHA256(serverSeed, clientSeed:nonce:cursor) where cursor advances per draw.
The server publishes SHA256(serverSeed) before any round uses it and reveals the full seed when it rotates — then every layout is independently verifiable.
Your client seed is mixed into every round, so outcomes can't be cherry-picked for you.