It's generally easier to make such a process tamper-proof than an election. You can pick a cryptographically secure open source PRNG and determine the seed in a decentralized way by allowing anyone to contribute a salt into a list which is made public at the deciding moment. Then anyone can verify the integrity of the process by verifying the seed includes their contribution, and computing the candidates themselves.