## Objective Security audit of random number generation. ## Scope - Review crypto.getRandomValues usage - Entropy source validation - CSPRNG compliance - Password strength validation ## Priority: P0 - CRITICAL