Entropy sources
Pool digest
Sensor & timing streams are mixed into a pool and reduced with SHA-256 alongside crypto.getRandomValues on every roll — sensors add flavor, the CSPRNG does the real work.