chore: update planning test gates

Author: BitHighlander

scripts/generate-test-report.py

@@ -775,15 +775,15 @@ def parse_junit(path):
        'cause fund loss or invalid transactions on the block-lattice.',
        [])]),
 
-    # ===== 7.14 NEW FEATURES =====
-    ('V', 'EVM Clear-Signing', '7.14.0',
+    # ===== 7.15.1 NEW FEATURES =====
+    ('V', 'EVM Clear-Signing', '7.15.1',
      'NEW: Verified transaction metadata for EVM contracts. Host sends a signed blob with contract '
      'name, function, and decoded parameters. Device verifies blob signature against trusted key, '
-     'then shows human-readable details with VERIFIED icon. Blind-sign policy gating is deferred '
-     'to firmware 7.15+.',
+     'then shows human-readable details with VERIFIED icon. Blind-sign policy gating ships with '
+     'firmware 7.15.1+.',
      [
          'CLEAR-SIGN: Signed metadata -> verify signature -> VERIFIED icon + method + decoded args',
-         'BLIND SIGN: No metadata + AdvancedMode on -> contract data signed (no gate until 7.15+)',
+         'BLIND SIGN: No metadata + AdvancedMode on -> contract data signed after policy gate',
      ],
      [
          ('V1', 'test_msg_ethereum_clear_signing', 'test_valid_metadata_returns_verified',
@@ -808,7 +808,7 @@ def parse_junit(path):
          ('V8', 'test_msg_ethereum_signtx', 'test_ethereum_blind_sign_allowed',
           'Blind sign permitted (AdvancedMode ON)',
           'Contract data with AdvancedMode enabled. Device allows signing. '
-          'Blind-sign blocking deferred to 7.15+.',
+          'Blind-sign policy gating covered in 7.15.1+.',
           []),
      ]),
 

tests/test_msg_ethereum_clear_signing.py

@@ -411,7 +411,7 @@ class TestEthereumClearSigning(common.KeepKeyTest):
 
     def setUp(self):
         super().setUp()
-        self.requires_firmware("7.14.0")
+        self.requires_firmware("7.15.1")
         self.requires_message("EthereumTxMetadata")
         self.setup_mnemonic_nopin_nopassphrase()
 

tests/test_msg_ethereum_signtx.py

@@ -100,7 +100,7 @@ def test_ethereum_blind_sign_blocked(self):
 
         OLED shows 'Blind signing disabled' then Failure.
         """
-        self.requires_firmware("7.15.0")
+        self.requires_firmware("7.15.1")
         self.requires_fullFeature()
         self.setup_mnemonic_nopin_nopassphrase()
         self.client.apply_policy("AdvancedMode", 0)
@@ -124,7 +124,7 @@ def test_ethereum_blind_sign_allowed(self):
 
         OLED shows 'BLIND SIGNATURE' before signing.
         """
-        self.requires_firmware("7.14.0")
+        self.requires_firmware("7.15.1")
         self.requires_fullFeature()
         self.setup_mnemonic_nopin_nopassphrase()
         self.client.apply_policy("AdvancedMode", 1)

tests/test_msg_zcash_display_address.py

@@ -15,6 +15,14 @@
 # Hardened offset
 H = 0x80000000
 
+ORCHARD_ONLY_UA_ACCOUNT_0 = (
+    "u1uzslnccvrw4r2y2kgjz7fm477xcnzge9z45scm4e6l6c63ren0ru29teedxw5vxu7c8xch"
+    "p3ec2pu3wkgldc5zphwtm4w3fchcwrl26c"
+)
+LEGACY_PLACEHOLDER_SKIP = (
+    "Legacy host-supplied placeholder UA does not test device-derived address path"
+)
+
 
 class TestMsgZcashDisplayAddress(common.KeepKeyTest):
     """Test Zcash unified address display and verification."""
@@ -24,6 +32,23 @@ def setUp(self):
         self.requires_firmware("7.15.0")
         self.requires_message("ZcashDisplayAddress")
 
+    def test_zcash_display_address_device_derived(self):
+        """Device derives and displays the Orchard-only UA from seed/account."""
+        self.setup_mnemonic_allallall()
+
+        resp = self.client.call(
+            zcash_proto.ZcashDisplayAddress(
+                address_n=[H + 32, H + 133, H + 0],
+                account=0,
+            )
+        )
+
+        self.assertIsInstance(resp, zcash_proto.ZcashAddress)
+        self.assertEqual(resp.address, ORCHARD_ONLY_UA_ACCOUNT_0)
+        self.assertTrue(resp.HasField("seed_fingerprint"))
+        self.assertEqual(len(resp.seed_fingerprint), 32)
+
+    @unittest.skip(LEGACY_PLACEHOLDER_SKIP)
     def test_zcash_display_address_basic(self):
         """Verify a unified address using FVK components from the device."""
         self.setup_mnemonic_allallall()
@@ -55,6 +80,7 @@ def test_zcash_display_address_basic(self):
         # Device should verify FVK matches and return the address
         self.assertIsInstance(resp, zcash_proto.ZcashAddress)
 
+    @unittest.skip(LEGACY_PLACEHOLDER_SKIP)
     def test_zcash_display_address_wrong_fvk_rejected(self):
         """Device rejects address when FVK doesn't match its own derivation."""
         self.setup_mnemonic_allallall()