It stayed hidden because reviews (human and AI) confirmed the hardware TRNG code existed in the binary but never traced the actual linker resolution of rng_get() from seed generation. Identical function signatures let the MicroPython Yasmarang path resolve silently with no build error. The guard only checked definition, not value. No end-to-end call-path tests or entropy-quality checks on generated seeds existed. Open-source eyes rarely audit full multi-submodule link behavior this deeply.
Show more
