pub fn preimage_random() -> Result<Zeroizing<[u8; 32]>>Expand description
X from the OS CSPRNG, failing closed: an error, never a zeroed buffer. Lives here rather than in the CLI so the whole preimage surface – and its randomness contract – is one crate’s (R0 r0 correctness I-2).