The verified draw uses a commit-reveal scheme: before the draw, we publish a SHA-256 hash of the list and a secret seed. At draw time, we reveal the seed — and anyone can recompute the hash and the winner to verify that nothing was changed after the fact.
It's exactly the guarantee you need for a YouTube or Twitch giveaway, a corporate contest, or any draw where participants don't trust by default. A pure-JavaScript verifier (open source) will be shipped so anyone can replay the computation independently.
This feature is part of the Streamer phase of the project. In the meantime, all plouf-plouf draws already use crypto.getRandomValues — cryptographically random, just not verifiable after the fact.