Function sign_randomized 

pub fn sign_randomized(
    sk: &[u8],
    m: &[u8],
    ctx: &[u8],
    rnd: &[u8; 32],
) -> Result<Vec<u8>, SignError>

Hedged ML-DSA-65 signature, FIPS 204’s default variant: rnd is 32 fresh random bytes mixed into the signature’s mask seed, so signing one message twice, or under an injected fault, never repeats the mask.