A sufficiently adversarial CPU could detect the sha256 hash you're using as a random number generator (and no other sha256 hash) and set its result to a known v

A sufficiently adversarial CPU could detect the sha256 hash you're using as a random number generator (and no other sha256 hash) and set its result to a known value as well. At some point, you gotta just trust the hardware.