Credit deposits at deposit_confirmations and verify the round's coins with the quorum before paying (B-82, DEP-03, DEP-04, DEP-09, DEP-12, DEP-14, ELC-17, ELC-27, RND-21, RND-22, RND-25, RND-39, DAT-10, DAT-11, DAT-24, DAT-62, DAT-67, DAT-68, AUD-12, AUD-44, AUD-45, API-30, API-31, API-36, ADR-06, ADR-52)

A user could bet and then double-spend the 1-conference deposit that funded the bet with a
private chain: the bet left the chain but its participant stayed `confirmed`, and the payout
failed "insufficient pool UTXOs" for ever with everyone else's money stuck. Coinbase outputs
were also credited at 1 confirmation (maturity is 120).

Deposits
- `round_config.deposit_confirmations` (default 6, 1-100, editable from /admin) is the
  threshold for a deposit; an output of a platform transaction (any txid of a
  pending_transactions row, RBF versions included) keeps 1; a coinbase output needs 120,
  recognised from the raw transaction, which must hash to the txid (`is_coinbase`, cached).
  `read_deposit_policy` / `classify_new_deposits` run between the read and the write, so no
  session is open across the lookup.
- The quorum must also place the coin deep enough on our own tip (ELC-17).
- Confirmed outputs short of their threshold are pending deposits (memory only, replaced at
  every refresh): shown in `pending_balance_sats` / `has_pending` (also for DEP-13's withdrawal
  message), never spendable. No scripthash notification announces a maturing deposit, so each
  new block refreshes only the users that have one, one task per user (DEP-09 now says so).

Payout
- `_trigger_payout` verifies the round's confirmed participants' bet outputs with the other
  servers (`verify_pool_outpoints`: strict majority of >= 2 answers per outpoint, a
  mempool-only coin or a tie gives no verdict) and builds from exactly those outpoints
  (RND-22), never from whatever else sits at the address. No quorum: `payout_failed`, `pool
  verification unavailable`, nothing changes. Bets that are gone become `reorged_out`, one
  `participant_reorged_out` row each, `pool_amount_sats` rewritten (only downward) in the same
  transaction, and the 70/30 split is computed on what is left.
- Winner's own bet gone: nothing is built; `rounds.payout_blocked_at` (Alembic f2c64a8d1e93,
  with `deposit_confirmations`, plain add_column) is set, `payout_blocked` and the pause with
  `paused_reason = 'payout_blocked'` are written in one transaction; `POST /admin/resume` clears
  the mark and the next attempt verifies again. /admin/rounds returns it.
- Rounds opened before B-80 (pool = the shared reserve address) keep the old active-server
  `listunspent` choice, since that address holds no single round's bets.

Ambiguities resolved: the winner's row stays `confirmed` while held (AUD-45 says every
participant whose bet is gone becomes `reorged_out`, but OPS-30/DAT-68 need the verification to
repeat after the resume, which only a `confirmed` row allows); `/`'s deposit hint no longer says
"1 confirmation" (7 languages, same keys); guides updated.

Tests changed because the spec changed: listener tests that credited height-100 coins at tip 0
now set a tip past every threshold; the payout fixtures seed confirmed participants (the new
source of the inputs) instead of an active-server `listunspent`, FakeNetwork answers the
verification, and test_round_pool_address asserts the quorum is asked about the round's
address. New: thresholds at exactly 6/5, configured value, coinbase at 119/120 and a mismatching
or missing raw tx, platform outputs at 1, dust, quorum height, waiting-deposit display and
disappearance, block-triggered refresh, resume, verification verdicts, gone bets excluded with
the split recomputed, winner gone held and paused, held payouts untouched until the resume,
re-verification after it, no quorum, a payout with 1 and with 400 participants against
reserve+fee+dust, admin config bounds and migration. Mutation-checked: threshold 1, ignored
coinbase, no height bound, no verification and no winner hold each fail tests.

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>

app/static/admin.html

@@ -85,6 +85,8 @@
             <input id="admin-draw-animation" inputmode="numeric" placeholder="es. 20">
             <label for="admin-draw-confirmations">Conferme sul blocco di estrazione (1–20, dal round successivo)</label>
             <input id="admin-draw-confirmations" inputmode="numeric" placeholder="es. 3">
+            <label for="admin-deposit-confirmations">Conferme per accreditare un deposito (1–100; le uscite coinbase ne richiedono comunque 120)</label>
+            <input id="admin-deposit-confirmations" inputmode="numeric" placeholder="es. 6">
             <label for="admin-fee-rate">Fee rate di rete (sat/vB)</label>
             <input id="admin-fee-rate" inputmode="numeric" placeholder="es. 1">
             <label for="admin-rbf-timeout">Timeout prima del fee-bump RBF (secondi)</label>

app/static/admin.js

@@ -151,6 +151,7 @@ async function adminLoadConfig() {
     document.getElementById('admin-round-cooldown').value = data.round_cooldown_seconds;
     document.getElementById('admin-draw-animation').value = data.draw_animation_seconds;
     document.getElementById('admin-draw-confirmations').value = data.draw_confirmations;
+    document.getElementById('admin-deposit-confirmations').value = data.deposit_confirmations;
     document.getElementById('admin-fee-rate').value = data.fee_rate_sat_vb;
     document.getElementById('admin-rbf-timeout').value = data.rbf_timeout_seconds;
     renderMaintenanceState(data.paused);
@@ -211,6 +212,7 @@ async function adminSave() {
     round_cooldown_seconds: parseInt(document.getElementById('admin-round-cooldown').value, 10),
     draw_animation_seconds: parseInt(document.getElementById('admin-draw-animation').value, 10),
     draw_confirmations: parseInt(document.getElementById('admin-draw-confirmations').value, 10),
+    deposit_confirmations: parseInt(document.getElementById('admin-deposit-confirmations').value, 10),
     fee_rate_sat_vb: parseInt(document.getElementById('admin-fee-rate').value, 10),
     rbf_timeout_seconds: parseInt(document.getElementById('admin-rbf-timeout').value, 10),
   };

app/static/i18n.js

@@ -87,7 +87,7 @@ const TRANSLATIONS = {
     'result.lose': 'Not a win this time.',
 
     'deposit.balanceTitle': 'Internal balance',
-    'deposit.balanceHint': 'Updated after 1 network confirmation',
+    'deposit.balanceHint': 'Updated once the network has confirmed your deposit (a few blocks)',
     'deposit.refreshBtn': 'Refresh',
     'deposit.refreshAria': 'Refresh balance',
     'deposit.addressTitle': 'Deposit address',
@@ -258,7 +258,7 @@ const TRANSLATIONS = {
     'result.lose': 'Non hai vinto questa volta.',
 
     'deposit.balanceTitle': 'Saldo interno',
-    'deposit.balanceHint': 'Aggiornato dopo 1 conferma sulla rete',
+    'deposit.balanceHint': 'Aggiornato quando la rete ha confermato il deposito (alcuni blocchi)',
     'deposit.refreshBtn': 'Aggiorna',
     'deposit.refreshAria': 'Aggiorna saldo',
     'deposit.addressTitle': 'Indirizzo di deposito',
@@ -426,7 +426,7 @@ const TRANSLATIONS = {
     'result.lose': 'Esta vez no has ganado.',
 
     'deposit.balanceTitle': 'Saldo interno',
-    'deposit.balanceHint': 'Actualizado tras 1 confirmación en la red',
+    'deposit.balanceHint': 'Se actualiza cuando la red confirma tu depósito (unos bloques)',
     'deposit.refreshBtn': 'Actualizar',
     'deposit.refreshAria': 'Actualizar saldo',
     'deposit.addressTitle': 'Dirección de depósito',
@@ -594,7 +594,7 @@ const TRANSLATIONS = {
     'result.lose': "Pas de gain cette fois-ci.",
 
     'deposit.balanceTitle': 'Solde interne',
-    'deposit.balanceHint': 'Mis à jour après 1 confirmation sur le réseau',
+    'deposit.balanceHint': 'Mis à jour une fois le dépôt confirmé par le réseau (quelques blocs)',
     'deposit.refreshBtn': 'Actualiser',
     'deposit.refreshAria': 'Actualiser le solde',
     'deposit.addressTitle': 'Adresse de dépôt',
@@ -762,7 +762,7 @@ const TRANSLATIONS = {
     'result.lose': 'Diesmal kein Gewinn.',
 
     'deposit.balanceTitle': 'Internes Guthaben',
-    'deposit.balanceHint': 'Aktualisiert nach 1 Netzwerkbestätigung',
+    'deposit.balanceHint': 'Aktualisiert, sobald das Netzwerk die Einzahlung bestätigt hat (einige Blöcke)',
     'deposit.refreshBtn': 'Aktualisieren',
     'deposit.refreshAria': 'Guthaben aktualisieren',
     'deposit.addressTitle': 'Einzahlungsadresse',
@@ -930,7 +930,7 @@ const TRANSLATIONS = {
     'result.lose': 'На этот раз без выигрыша.',
 
     'deposit.balanceTitle': 'Внутренний баланс',
-    'deposit.balanceHint': 'Обновляется после 1 подтверждения в сети',
+    'deposit.balanceHint': 'Обновляется, когда сеть подтвердит депозит (несколько блоков)',
     'deposit.refreshBtn': 'Обновить',
     'deposit.refreshAria': 'Обновить баланс',
     'deposit.addressTitle': 'Адрес для депозита',
@@ -1098,7 +1098,7 @@ const TRANSLATIONS = {
     'result.lose': '这次没有中奖。',
 
     'deposit.balanceTitle': '内部余额',
-    'deposit.balanceHint': '在网络确认 1 次后更新',
+    'deposit.balanceHint': '网络确认存款后更新（需要数个区块）',
     'deposit.refreshBtn': '刷新',
     'deposit.refreshAria': '刷新余额',
     'deposit.addressTitle': '存款地址',

app/static/index.html

@@ -176,7 +176,7 @@
   <div class="dash-panel active" id="panel-deposit">
     <div class="card">
       <h2 data-i18n="deposit.balanceTitle">Saldo interno</h2>
-      <p class="hint" data-i18n="deposit.balanceHint">Aggiornato dopo 1 conferma sulla rete</p>
+      <p class="hint" data-i18n="deposit.balanceHint">Aggiornato quando la rete ha confermato il deposito (alcuni blocchi)</p>
       <div class="row-between">
         <div><span class="balance-value mono" id="dash-balance">—</span> <span class="balance-unit">PLM</span></div>
         <button class="secondary" onclick="refreshMe()" id="refresh-btn" data-i18n-aria-label="deposit.refreshAria" aria-label="Aggiorna saldo">