01Before the draw: eligibility and sealing
- One application per CNIC per category, enforced at intake
- Booking amount matched to a bank receipt before the application is eligible
- Flagged applications resolved or excluded, with a reason
- The eligible list frozen and hashed; the hash published to applicants and the auditor
02The draw itself
Use a cryptographic random generator driven by a seed that is generated and sealed in an envelope before the ceremony, then entered on stage. The sequence is deterministic from the seed and the sealed list, so anyone with both can replay it and get the same result. Show applicant and plot on a projector as each is drawn; record the screen.
03Plot assignment
Two acceptable methods: random plot from the pool at the moment of the draw, or sequence-based assignment published in advance. Either way, the plot turns Booked on the live map immediately, so the same plot cannot be promised to a dealer that evening.
04Publishing results
- WhatsApp and SMS to every applicant within minutes, successful or not
- A public results page searchable by application number or masked CNIC
- Allotment letters generated from a template with the plan attached
- Refund batch for unsuccessful applicants approved and paid within a stated number of days
05After the ballot
Winners become files in the installment engine with the category plan starting from the ballot date. The audit package (list hash, seed, draw log, results) is stored and exportable. That package is what you hand to a regulator or a court if the ballot is ever questioned.