RNG Exploits Are Mathematically Impossible

import requests

ZPL_API = "/api"
HEADERS = {"Authorization": "Bearer YOUR_API_KEY"}

LOOT_TABLE = [
    (0.60, "Common"),
    (0.25, "Uncommon"),
    (0.10, "Rare"),
    (0.04, "Epic"),
    (0.01, "Legendary"),
]

def roll_loot(chest_level: int) -> str:
    # N scales with chest tier — higher N = more precision
    n = 9 + chest_level * 4

    resp = requests.post(f"{ZPL_API}/compute",
        headers=HEADERS,
        json={"N": n, "bias": 0.5, "samples": 1}
    )
    p = resp.json()["p"]  # server-generated, client never sees this

    # Map probability to loot tier
    cumulative = 0
    for threshold, rarity in LOOT_TABLE:
        cumulative += threshold
        if p <= cumulative:
            return rarity
    return "Common"

# Called by your game server, never the client
result = roll_loot(chest_level=3)
print(f"Loot: {result}")  # "Rare" — determined server-side

// ZPLCombat.cs — all dice rolls handled server-side via ZPL
public class ZPLCombat : MonoBehaviour
{
    private const string ZPL_API = "/api/compute";

    public IEnumerator ResolveAttack(CombatData data, Action<CombatResult> callback)
    {
        var payload = new { N = 9, bias = 0.5f, samples = 3 };
        string json = JsonUtility.ToJson(payload);

        using var req = new UnityWebRequest(ZPL_API, "POST");
        req.uploadHandler = new UploadHandlerRaw(Encoding.UTF8.GetBytes(json));
        req.downloadHandler = new DownloadHandlerBuffer();
        req.SetRequestHeader("Authorization", $"Bearer {ApiKey}");

        yield return req.SendWebRequest();

        var result = JsonUtility.FromJson<ZPLResponse>(req.downloadHandler.text);
        bool hit = result.p > 0.5f;     // hit or miss
        bool crit = result.p > 0.9f;    // critical hit threshold

        callback(new CombatResult { Hit = hit, Critical = crit, AIN = result.ain });
    }
}