Provable.io changelog

v1.9.0 (2026-10-20)

Terms of Service: a product that other people use and that calls the API must show a visible link to provable.io, ideally a "Verify" link next to each result that opens its verification page. A rel="nofollow" or rel="sponsored" link is fine, internal tools are exempt, and products already live have until November 19, 2026. See /terms, section 5.
/brand has copy-paste snippets for the verification link and the footer link.

Sealed commits, for apps that compute outcomes themselves, like real-time games: POST /api/commit with sealed: true and a label (live key) returns the seed to your key only, one commit per key and label, ever.
GET /api/commits?label= lists every sealed commit for a label publicly; each seed becomes public once revealed, or after 7 days.

New /brand page: how to name, show and link to Provable.io, with logo files and a brand guidelines PDF.

New free tool: the provably fair calculator at /tools/provably-fair-calculator.
The sweepstakes, lottery, raffle and giveaway examples reveal the committed seed, and state how long a commitment lasts correctly.

Support tickets work over email: notifications carry the full message, each ticket keeps one thread, and you can reply straight from your inbox.

Each day's transparency-log root is stored with its exact leaf list and never rebuilt, so inclusion proofs keep matching the published root. /transparency lists the 33 earlier days that can't be proven.
Inclusion proofs work for client seeds that contain :.
The verifier keeps revealed seeds and checks an outcome by replaying it; the permalink recipe includes the cursor.
Outcome permalinks show pick, bytes and dice values, and long hashes wrap on phones.

The lottery guide draws without replacement: it shuffles the 49 balls with /api/shuffle and takes the first 6. Six separate /api/ints draws repeat a number about 27% of the time.

Forgot your password? Reset it from an email link; the reset signs you out everywhere.
New homepage: a live API console, a ledger of recent draws you can replay in your browser, and a bias slider.
The API reference has Try it forms that pass a draw straight into its verification, and a filter for the endpoint list.
The public API accepts browser requests from any origin, so the TypeScript SDK runs in a web page. /api responses are never cached.
Webhooks retry for about 15 minutes (6 attempts), and every event carries an eventId.
Breaking: webhook signatures include the send time (X-Provable-Signature: t=<unix>,sha256=<hex>, an HMAC of <t>.<body>), so a captured delivery can't be replayed. Update your check as shown in /docs/webhooks.
All 12 use-case pages show a real draw with its proof steps and replay it in your browser.
Reorganized dashboard tabs, and a cleaner look across the site: type, corners, navigation and footer.

Breaking: ints, dice, shuffle and pick are now unbiased (provable-core 3.0.0), so the same seeds can give a different result than before. Ranges are capped at 2^32, and every outcome records the nonce that was actually hashed.
Security fixes from an audit of sign-in, sessions, account deletion, webhooks and API input handling.
Signed-in visitors can use the docs' Run buttons and Get started's Create commitment again; both failed with 403.
Get started is easier to read, and the menu icons show again.

Provable.io moved to its own servers behind Cloudflare. Versions are numbered from this release.
An API call with an unknown or revoked key gets 401 invalid_api_key instead of a 200 drawn as anonymous.