I feel like there is an exploit if you can predict the ordering of the hosts before the block is compiled.

It was in the protocol document that I started. It should also be somewhere in the longer document.