feat: AdvancedMode policy tests for ETH + Solana blind-signing

ETH:
- E16: Contract data BLOCKED without AdvancedMode (OLED: "BLOCKED")
- E17: Contract data ALLOWED with AdvancedMode (OLED: "CONFIRM ETHEREUM DATA" hex)

Solana:
- S16: Unknown instruction REJECTED without AdvancedMode
- S17: Unknown instruction ALLOWED with AdvancedMode (OLED: "BLIND SIGN")

Proves the AdvancedMode policy gate works for both chains:
- Default: blind-signing blocked (safe for regular users)
- Opt-in: power users enable AdvancedMode, see warning, confirm explicitly

Author: BitHighlander

scripts/generate-test-report.py

@@ -633,6 +633,18 @@ def parse_junit(path):
           '0x swap ETH to ERC-20', 'DEX aggregator swap via 0x protocol.', []),
          ('E15', 'test_msg_ethereum_cfunc', 'test_sign_execTx',
           'Contract function call', 'Generic contract call signing.', []),
+         ('E16', 'test_msg_ethereum_signtx', 'test_ethereum_contract_data_blocked_without_advanced_mode',
+          'Contract data BLOCKED without AdvancedMode',
+          'Without AdvancedMode policy, arbitrary contract data signing is completely blocked. '
+          'OLED shows "BLOCKED — Blind signing requires AdvancedMode. Enable in device settings." '
+          'This is the default safe behavior — prevents accidental interaction with malicious contracts.',
+          ['BLOCKED warning']),
+         ('E17', 'test_msg_ethereum_signtx', 'test_ethereum_contract_data_allowed_with_advanced_mode',
+          'Contract data ALLOWED with AdvancedMode',
+          'With AdvancedMode enabled, OLED shows "CONFIRM ETHEREUM DATA" with the raw hex bytes '
+          'and byte count. User must explicitly confirm they understand the contract call data. '
+          'This is the power-user path for DeFi protocols.',
+          ['CONFIRM ETHEREUM DATA hex']),
      ]),
 
     ('R', 'Ripple (XRP)', '7.0.0',

tests/test_msg_ethereum_signtx.py

@@ -498,5 +498,59 @@ def test_ethereum_signtx_nodata(self):
         )
 
 
+    # ================================================================
+    # AdvancedMode policy tests — blind-sign gate for contract data
+    # ================================================================
+
+    def test_ethereum_contract_data_blocked_without_advanced_mode(self):
+        """Contract data WITHOUT AdvancedMode → "Blocked" on OLED, then Failure.
+        This is the default safe behavior: unknown contract calls cannot be signed
+        unless the user explicitly enables AdvancedMode. Prevents accidental
+        interaction with malicious contracts."""
+        self.requires_fullFeature()
+        self.setup_mnemonic_nopin_nopassphrase()
+        # Ensure AdvancedMode is OFF
+        self.client.apply_policy("AdvancedMode", 0)
+
+        try:
+            self.client.ethereum_sign_tx(
+                n=[0, 0],
+                nonce=0,
+                gas_price=20,
+                gas_limit=20,
+                to=binascii.unhexlify("1d1c328764a41bda0492b66baa30c4a339ff85ef"),
+                value=0,
+                data=b"\xde\xad\xbe\xef" * 4,  # arbitrary contract data
+            )
+            self.fail("Expected CallException for blind-sign without AdvancedMode")
+        except CallException as e:
+            self.assertIn("policy", str(e).lower())
+
+    def test_ethereum_contract_data_allowed_with_advanced_mode(self):
+        """Contract data WITH AdvancedMode → shows raw hex data + "Confirm Ethereum Data".
+        OLED displays the contract call data in hex for the user to verify.
+        This is the power-user path for interacting with DeFi contracts."""
+        self.requires_fullFeature()
+        self.setup_mnemonic_nopin_nopassphrase()
+        # Enable AdvancedMode
+        self.client.apply_policy("AdvancedMode", 1)
+
+        sig_v, sig_r, sig_s = self.client.ethereum_sign_tx(
+            n=[0, 0],
+            nonce=0,
+            gas_price=20,
+            gas_limit=20,
+            to=binascii.unhexlify("1d1c328764a41bda0492b66baa30c4a339ff85ef"),
+            value=0,
+            data=b"\xde\xad\xbe\xef" * 4,
+        )
+        # Should succeed with a valid signature
+        self.assertIn(sig_v, (27, 28))
+        self.assertGreater(len(sig_r), 0)
+
+        # Cleanup
+        self.client.apply_policy("AdvancedMode", 0)
+
+
 if __name__ == "__main__":
     unittest.main()

tests/test_msg_solana_signtx.py

@@ -326,6 +326,41 @@ def test_solana_sign_memo(self):
             address_n=parse_path("m/44'/501'/0'/0'"), raw_tx=raw_tx))
         self.assertEqual(len(resp.signature), 64)
 
+    # ================================================================
+    # Blind-sign policy tests — AdvancedMode gate
+    # ================================================================
+
+    def test_solana_blind_sign_rejected_without_advanced_mode(self):
+        """Unknown instruction WITHOUT AdvancedMode → Failure.
+        Default safe behavior: unknown programs cannot be signed."""
+        self.requires_fullFeature()
+        self.requires_message("SolanaSignTx")
+        self.setup_mnemonic_allallall()
+        self.client.apply_policy('AdvancedMode', False)
+        from_pubkey = self._get_from_pubkey()
+        unknown_program = b'\xEE' * 32
+        instr_data = b'\x01\x02\x03\x04'
+        raw_tx = self._build_tx(from_pubkey, [], unknown_program, instr_data)
+        with pytest.raises(CallException) as exc:
+            self.client.call(messages.SolanaSignTx(
+                address_n=parse_path("m/44'/501'/0'/0'"), raw_tx=raw_tx))
+        self.assertIn("AdvancedMode", str(exc.value))
+
+    def test_solana_blind_sign_allowed_with_advanced_mode(self):
+        """Unknown instruction WITH AdvancedMode → "Blind Sign" warning, user confirms."""
+        self.requires_fullFeature()
+        self.requires_message("SolanaSignTx")
+        self.setup_mnemonic_allallall()
+        self.client.apply_policy('AdvancedMode', True)
+        from_pubkey = self._get_from_pubkey()
+        unknown_program = b'\xEE' * 32
+        instr_data = b'\x01\x02\x03\x04'
+        raw_tx = self._build_tx(from_pubkey, [], unknown_program, instr_data)
+        resp = self.client.call(messages.SolanaSignTx(
+            address_n=parse_path("m/44'/501'/0'/0'"), raw_tx=raw_tx))
+        self.assertEqual(len(resp.signature), 64)
+        self.client.apply_policy('AdvancedMode', False)
+
 
 if __name__ == '__main__':
     unittest.main()