feat: Solana blind-sign policy tests + report catalog S12-S17

- S12: SPL Token approve
- S13: Stake withdraw
- S14: Stake deactivate
- S15: Show address with QR
- S16: Blind-sign REJECTED without AdvancedMode (policy gate)
- S17: Blind-sign ALLOWED with AdvancedMode (OLED: "BLIND SIGN" warning)

OLED screenshots captured: ENABLE POLICY, BLIND SIGN warning, confirmation.
145 tests, 144 passed, 1 pending (BIP-85 invalid_word_count skip).

Author: BitHighlander

scripts/generate-test-report.py

@@ -834,6 +834,35 @@ def parse_junit(path):
           'Compute budget unit price',
           'Set priority fee for transaction. OLED shows compute unit price.',
           ['Unit price']),
+         ('S12', 'test_msg_solana_signtx', 'test_solana_sign_token_approve',
+          'SPL Token approve',
+          'Approve delegate to spend tokens. OLED shows approval amount and delegate address.',
+          ['Token approval']),
+         ('S13', 'test_msg_solana_signtx', 'test_solana_sign_stake_withdraw',
+          'Stake withdraw',
+          'Withdraw SOL from stake account. OLED shows withdrawal amount.',
+          ['Withdraw amount']),
+         ('S14', 'test_msg_solana_signtx', 'test_solana_sign_stake_deactivate',
+          'Stake deactivate',
+          'Begin cooldown period for staked SOL. OLED shows "Deactivate stake?"',
+          ['Deactivate']),
+         ('S15', 'test_msg_solana_getaddress', 'test_solana_show_address',
+          'Show Solana address on OLED',
+          'Full 44-char base58 address with QR code and derivation path displayed on OLED. '
+          'User compares against wallet app to detect address substitution attacks.',
+          ['Solana QR + address']),
+         ('S16', 'test_msg_solana_signtx', 'test_solana_blind_sign_rejected_without_advanced_mode',
+          'Blind-sign REJECTED without AdvancedMode',
+          'Unknown program instruction without AdvancedMode policy returns Failure immediately. '
+          'The device refuses to sign unverified transactions by default — users must explicitly '
+          'enable AdvancedMode to opt in to blind-signing.',
+          ['Policy rejection']),
+         ('S17', 'test_msg_solana_signtx', 'test_solana_blind_sign_allowed_with_advanced_mode',
+          'Blind-sign ALLOWED with AdvancedMode',
+          'With AdvancedMode enabled, OLED shows "BLIND SIGN — Sign unverified Solana transaction? '
+          'The device cannot fully verify the contents." User must explicitly confirm. This is the '
+          'power-user escape hatch for DeFi protocols not yet supported by clear-signing.',
+          ['ENABLE POLICY', 'BLIND SIGN warning', 'Confirmation']),
      ]),
 
     ('T', 'TRON', '7.14.0',

tests/test_msg_solana_signtx.py

@@ -326,6 +326,47 @@ def test_solana_sign_memo(self):
             address_n=parse_path("m/44'/501'/0'/0'"), raw_tx=raw_tx))
         self.assertEqual(len(resp.signature), 64)
 
+    # ================================================================
+    # Blind-sign policy tests — AdvancedMode gate
+    # ================================================================
+
+    def test_solana_blind_sign_rejected_without_advanced_mode(self):
+        """Unknown instruction WITHOUT AdvancedMode policy → Failure.
+        OLED: no screen shown — firmware rejects before any user interaction.
+        This is the default safe behavior: unknown programs cannot be signed."""
+        self.requires_fullFeature()
+        self.requires_message("SolanaSignTx")
+        self.setup_mnemonic_allallall()
+        # Ensure AdvancedMode is OFF
+        self.client.apply_policy('AdvancedMode', False)
+        from_pubkey = self._get_from_pubkey()
+        # Build tx with a completely unknown program ID
+        unknown_program = b'\xEE' * 32
+        instr_data = b'\x01\x02\x03\x04'
+        raw_tx = self._build_tx(from_pubkey, [], unknown_program, instr_data)
+        with pytest.raises(CallException) as exc:
+            self.client.call(messages.SolanaSignTx(
+                address_n=parse_path("m/44'/501'/0'/0'"), raw_tx=raw_tx))
+        self.assertIn("AdvancedMode", str(exc.value))
+
+    def test_solana_blind_sign_allowed_with_advanced_mode(self):
+        """Unknown instruction WITH AdvancedMode policy → "Blind Sign" warning on OLED.
+        User confirms, device signs. This tests the explicit opt-in for power users."""
+        self.requires_fullFeature()
+        self.requires_message("SolanaSignTx")
+        self.setup_mnemonic_allallall()
+        # Enable AdvancedMode
+        self.client.apply_policy('AdvancedMode', True)
+        from_pubkey = self._get_from_pubkey()
+        unknown_program = b'\xEE' * 32
+        instr_data = b'\x01\x02\x03\x04'
+        raw_tx = self._build_tx(from_pubkey, [], unknown_program, instr_data)
+        resp = self.client.call(messages.SolanaSignTx(
+            address_n=parse_path("m/44'/501'/0'/0'"), raw_tx=raw_tx))
+        self.assertEqual(len(resp.signature), 64)
+        # Disable AdvancedMode after test
+        self.client.apply_policy('AdvancedMode', False)
+
 
 if __name__ == '__main__':
     unittest.main()