Modes
| Mode | Sources | Hand-reproducible | Recommended |
|---|---|---|---|
| A | Dice only, rolled by you | Yes | Yes, this is the default |
| A' | Dice, rolled by the device | The arithmetic yes, the rolls no | Only if you will not roll |
| B | Dice plus machine sources | Only if you record every source | Acceptable |
| C | Machine only | No | Discouraged, refused unless acknowledged |
| D | Import an existing BIP-39 mnemonic | Not applicable | For recovery |
Mode A is the only mode where the device can be caught lying with a pocket calculator and a laptop. It is the default for that reason.
Mode A' is not Mode A. The device will roll for you, one at a time or the rest in one go, and the digit string it produces hashes exactly as a hand-rolled one does, so everything downstream stays checkable. What is not checkable is the string itself: you did not watch those dice land. A device that wanted to hand you a seed it had already chosen would do it precisely there, and you could not tell. It exists because rolling 100 dice takes ten minutes and somebody who will not spend it is better served by an honest option than by picking whichever mode is quickest. The screen counts how many rolls came from the device and says so.
Rendered from docs/ENTROPY.md, the same bytes that ship with the code. SHA-256 ce8ad87ef3fbce5b6ff615296b3ec081a840415ae6bc089bff748df3dc6a348d