NIST SP 800-90B · entropy assessment
Follow physical noise from the circuit to the cryptographic byte — step the modular-multiplication loop, measure a sample, read each min-entropy estimator and its assumptions, break the stream, and watch conditioning stretch bytes without ever adding entropy.