Seed the bracket with a verifiable draw bound to a live public drand beacon — not even the organizer can bias it. Off = manual seeding.