random int derived

{
  "input": {
    "body": {
      "max": 6,
      "min": 1,
      "count": 3
    },
    "type": "http",
    "method": "POST",
    "bodyType": "json"
  },
  "output": {
    "type": "json",
    "example": {
      "bytes": 32,
      "health": {
        "passed": true,
        "min_entropy_per_byte": 7.8216
      },
      "result": {
        "max": 6,
        "min": 1,
        "ints": [
          5,
          1,
          2
        ],
        "count": 3
      },
      "source": {
        "name": "software-fallback",
        "model": "os.urandom CSPRNG",
        "notes": "non-attested fallback for testing/degraded mode",
        "vendor": "os",
        "attested": false,
        "is_quantum": false,
        "device_path": null,
        "is_hardware": false
      },
      "product": "random_int",
      "encoding": "hex",
      "derivation": {
        "kind": "range",
        "rules": {
          "seed": "seed = sha3_256(\"animica/qrng/public/v1\" || \"|k:\" || kind || \"|r:\" || request_id || \"|b:\" || bytes(randomness))",
          "stream": "stream = sha3_256(seed || be8(counter)) for counter = 0,1,2,… concatenated; consumed left to right, never reused",
          "uniform_int": "randbelow(n): k = floor((bitlen(n)+7)/8)+1 bytes per attempt, read big-endian as x; limit = 2^(8k); accept when x < limit - (limit mod n); value = x mod n. Rejected attempts still consume their k bytes. n <= 1 consumes nothing and returns 0. This is rejection sampling — plain \"x mod n\" would bias small values."
        },
        "steps": [
          "seed the DRNG with kind=\"range\" and your request_id over the raw randomness above",
          "for i = 0..2: ints[i] = 1 + randbelow(6)"
        ],
        "domain": "animica/qrng/public/v1",
        "seed_hex": "5fb4cc0e8007c201060453ee9b7cacb38444d32d76d423c61e601117fadd3068",
        "verifier": {
          "api": "AnimicaBeacon.drngSeed(entropy, kind, request_id) + AnimicaBeacon.QDRNG reproduce the stream; AnimicaBeacon.verifyResult(derivation.recompute) === true whenever `recompute` is present",
          "file": "randomness/beacon_api/static/verify.js (Animica repo, github.com/animicaorg) — zero-dependency, runs in Node and the browser",
          "note": "verify.js calls the seed material `beacon` because it was written for beacon rounds. This product is NOT a beacon round: the seed material is the raw `randomness` bytes above, which the node signed (see `verification`)."
        },
        "algorithm": "uniform-int-rejection-sampling",
        "recompute": {
          "kind": "range",
          "output": [
            5,
            1,
            2
          ],
          "params": {
            "hi": 6,
            "lo": 1,
            "count": 3
          },
          "round_id": 0,
          "beacon_hex": "8e8d85d9c03247ffdff7b3db1c917b7a0e97a569e8cf098071dd91cc9121ae55",
          "request_id": ""
        },
        "request_id": "",
        "entropy_hex": "8e8d85d9c03247ffdff7b3db1c917b7a0e97a569e8cf098071dd91cc9121ae55",
        "stream_bytes_consumed": 6
      },
      "randomness": "8e8d85d9c03247ffdff7b3db1c917b7a0e97a569e8cf098071dd91cc9121ae55",
      "attestation": {
        "alg": "ed25519",
        "backend": "software",
        "attested": false,
        "digest_hex": "14a2636cf09e18539ab6ed62de65af350c2f6014d269b74d127fc1604c7aa68a",
        "signature_hex": "bee4d32ee31dd92b07f1eee3113ed722c3c96c5fae98c509bcca8f66a5ceaff3eb4a6cd41cd97fc32deebdeeab18b4affea467549dd4ef387ddbdae6d415e900",
        "public_key_hex": "8a2228f4bde8f72964a7ff4aa759f24932ae1cccd9462ad94ca6e508d6b87a64"
      },
      "verification": {
        "rules": [
          "attestation.digest_hex == sha3_256(bytes(randomness))",
          "ed25519_verify(pubkey=attestation.public_key_hex, message=raw_bytes(attestation.digest_hex), signature=attestation.signature_hex)"
        ],
        "method": "signed-digest-attestation",
        "attested": false,
        "verifier": "randomness/beacon_api/static/verify.js in the animica repo (github.com/animicaorg) — dependency-free Node module exporting sha3_256; pair with any ed25519 verifier",
        "trust_model": "signed by the serving node, not client-recomputable: you trust the node's entropy source, then verify it signed exactly these bytes. Check health.passed and attestation.attested before relying on it."
      }
    }
  }
}