nx_entropy.nx

nx_entropy.nx -- the team's CSPRNG organ (security ladder rung: random IV/salt + secret rotation both REQUIRE real randomness; the vault's path-derived IV was a flagged debt and becomes an AES-GCM nonce-reuse BREAK the moment a path is re-sealed with a new value). Source = the kernel CSPRNG via getrandom(2), x86_64 syscall 318 called DIRECT (the frozen kg syscall table lacks a row; runtime-computed numbers are the blessed escape hatch). Fails CLOSED: callers must treat a nonzero return as fatal -- never fall back to weak bits. license_tier: ORIGINAL