Entropy Beacon

Every block's beacon is SHA256d("entropy" ‖ block hash). The block hash covers the proof of work, so no one knows a beacon before its block is solved, and a miner can bias it only by discarding a solved block. Lotteries and random mints consume these beacons.