The Iron Trifecta
Raffle accounting, webhook intake, and public settlement audit display.
Version 0.1.1 · Public audit display
Public Ledger
Current, upcoming, historic, projected, and settled raffles. Admin operations stay hidden and server-protected.
Admin Wallet Gate
v0.1.1 · Wallet verified admin shell
Triple-click access requires the approved admin wallet to sign a server nonce. This signature authorizes an admin session only. It does not move funds or approve a transaction.
Approved primary admin wallet: 8pmN…jY3k
8pmN…jY3k
Wallet Admin
Manual calculator first. This is the only admin mode available after wallet verification alone.
Stage 1 records projections only. It does not send vault funds.
No calculation yet.
Password Protected
Incoming raw storage is live. Outgoing notification execution is staged for v0.2+.
Endpoint: /api/webhooks/raffle
/api/webhooks/raffle
Header: x-raffle-stats-signature as HMAC SHA256.
x-raffle-stats-signature
Discord/email notification config is protected and staged.
Vault status and keypair replacement are protected. Auto-settlement sends remain disabled until v0.3.
Not loaded.
Default split is Rev Share/Holders 50%, DAO Treasury 40%, Lieutenant 10%. Active rows must total 100.
View tables and delete one row with typed confirmation. All changes are audit logged.
Theme/logo/title and password manager are sensitive settings.
Run ADMIN_PASSWORD='...' bash scripts/set-admin-password.sh on the server. Password hashes are stored in MySQL; raw passwords are never stored.
ADMIN_PASSWORD='...' bash scripts/set-admin-password.sh
Administrative Password Required
Wallet admin is verified. This mode also requires the administrative password.