Unique identity
Each selectable unit has an inventory ID, serial information, custody location, and eligibility state.
Inventory & fairness
ArcTrove's production architecture is designed to connect each offered outcome to one unique physical unit, preserve the selection inputs, and generate evidence for independent review. Internal evidence is not a third-party audit.
reserved_inventory_ids[0…N−1]RNG may select an index onlyPhysical inventory invariant
Each selectable unit has an inventory ID, serial information, custody location, and eligibility state.
A database transaction prevents one physical item from being active in multiple pools or assignments.
The selected item moves from reserved inventory to the buyer's vault without an intermediate resellable state.
Pool composition, seed commitments, nonce, policy identity, price, and pull-time FMV are bound to the event.
Deterministic selection
For generic packs, a cryptographic HMAC-SHA256 process can combine committed seed inputs and a nonce to derive a selection index inside the reserved array. The selected output can only be one of those physical IDs.
Vault Nine uses the same bounded physical reserve differently: a precommitted deterministic permutation conceals the nine mappings, then the customer chooses a display slot. The committed mapping—not a later random choice—resolves that slot to the physical result.
Audit evidence generators
ArcTrove's internal tools are intended to export raw evidence. They do not certify fairness, legality, valuation, or compliance.
Inputs, commitments, nonces, derived indexes, and selected physical IDs.
Theoretical weights, empirical selection counts, sub-tier results, and expected-value calculations.
Reservation, assignment, custody, vault, sell-back, and fulfillment state transitions.
Pull-time FMV evidence, source provenance, policy version, and later disposition calculations.