> For the complete documentation index, see [llms.txt](https://docs.fast.poker/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.fast.poker/architecture/tee-deal-reveal.md).

# TEE deal and reveal

The TEE protects live card privacy. The commitment/proof path protects deck integrity.

## Why it exists

Online poker has two hard problems:

1. Nobody should be able to peek at hole cards.
2. Nobody should be able to change the deck after seeing action.

Fast Poker addresses both with TEE-backed private card handling and cryptographic commitments.

## Deal

At the start of a hand, the TEE shuffles and deals. Hole cards are written to private card state that only the owning player and the TEE can read.

The hand also commits to the deck before cards are revealed.

## Reveal

When the board advances, the TEE reveals the next public cards and links those cards back to the commitment.

If a revealed card does not match the committed deck, verification fails.

## Privacy boundary

| Actor           | Can see your hole cards during a hand? |
| --------------- | -------------------------------------- |
| You             | Yes                                    |
| TEE             | Yes                                    |
| Other players   | No                                     |
| Dealer          | No                                     |
| Fast Poker team | No                                     |

## What becomes public

| Data                         | Public? |
| ---------------------------- | ------- |
| Community cards              | Yes     |
| Shown showdown cards         | Yes     |
| Folded or mucked cards       | No      |
| Commitment and reveal proofs | Yes     |

Folded and mucked cards stay private like normal poker.

## Scheduled duel cards

Scheduled 6-max/9-max duels use the same private-card boundary. Each selected seat receives private duel hole cards. NEXT CARDS advances both players to a new private deal; PLAY accepts the current one. Resolution publishes the board, both duel hands, winner/loser, symmetric chip stake, and whether an actual knockout transferred a Flat Bounty point in the duel hand-report event.

## Limits

The TEE is a real trust assumption. If the TEE were compromised in real time, live hole-card privacy could be affected. The commitment/proof system still gives players a way to detect deck inconsistency after the hand.

See [Security](/security-and-audits/08-security.md) for the broader trust model.