3.) you regularly run entropy testers against /dev/random to verify randomness (and hope/trust that the entropy you observe is unique, not copied to any other instances).