How selection works

An equal chance means equal.

The daily draw is deliberately separated from popularity, payment, nationality, and editorial taste. Eligibility is binary; nobody is “more eligible” than anyone else.

inputs committed before the draw
D−2
primary and ordered backups
1 + 3
time to accept freely
12h
one Chosen One, one day, forever
Once

01 · Eligibility

In the pool, or not.

At pool-freeze time, every condition below must be true. There is no score or tier.

  • The account is active and has a stable Apple or Google provider identifier.
  • The genuine app and device passed platform attestation, and the device is not already bound to another pool account.
  • The account is at least seven days old.
  • The birth year meets the conservative 16-on-January-1 UTC rule.
  • The account has genuine participation activity and no unresolved review flag.
  • The community rules have been accepted.
  • The person has chosen to enter the draw.
  • The person has never previously been Chosen One.

Everyone who meets the same complete test receives the same probability.

02 · The draw

Frozen first. Recorded throughout.

The ordering is produced once from an immutable snapshot, not from a live query that can drift.

  1. 01D−2 · 23:50

    Freeze and commit the eligible pool

    We publish the pool hash, candidate count and a commitment to secret entropy. Someone who becomes eligible later waits for the next pool.

  2. 02D−2 · 00:00

    Draw from the committed inputs

    The service can only use the already-frozen pool and cryptographically secure committed seed.

  3. 03Same operation

    Order one primary and three backups

    The result is deterministic from the recorded inputs and can be reproduced.

  4. 04Permanent

    Keep the audit row

    Cancelled draws and replacements remain recorded; the history is not rewritten.

03 · Forbidden inputs

The draw does not know who is popular.

These signals are not merely ignored by policy. The selection engine is forbidden from receiving them.

  • Payment or subscription tier
  • Popularity to accumulate
  • Session count or content scores
  • Sponsorship or admin preference
  • Nationality quotas or language
  • Beauty, photo, or profile-quality scoring

04 · Consent and backups

The primary candidate has 12 hours to accept. Declining or missing the notification carries no penalty and returns the person to future pools.

  1. 01Primary
  2. 02Backup 1
  3. 03Backup 2
  4. 04Backup 3

If none can take part, an emergency re-draw uses the same frozen pool and keeps the original record. No one is published without explicit acceptance.

05 · Before publication

Being drawn is not enough to go live.

At launch, an accepted candidate completes a guided portrait. A person reviews the portrait and answers before publication.

If nobody has accepted and passed review by the deadline, Unumae shows a Quiet Day. It never invents a Chosen One, skips consent, or publishes unreviewed work.

06 · What can be verified

The record makes reproduction possible.

The pool hash, candidate count, entropy commitment, source, algorithm version, commit time, revealed seed, replacements, and draw version are retained so the selection can be reconstructed and audited.

The commitment is public before the draw. The seed is revealed only after publication, when anyone can verify the commitment and reproduce the result.