What the developer wrote
Authored by Peter D. Gray
planning
What changed, and why it matters
This commit only adds new test-plan comments to a test file. It does not change any firmware code, fix any bug, or alter behavior. It is a documentation/planning update for future tests of the 'hobbled mode' feature.
No action needed; this is a test-planning commit with no runtime or security impact.
Security signals we found
No strong security signals were identified.
Evidence from the diff
The diff appends a list of planned test cases to testing/test_hobble.py. The additions are all comments (inside a triple-quoted string) describing scenarios to verify around hobbled mode: notes handling, teleport restrictions, settings menu absence, seed vault/temp seed behavior, login sequences, word entry, menu tree updates, and QR type whitelisting. No executable code, logic, or configuration is modified.
Changed components
testing/test_hobble.pyInspect captured patch +20 / −0
diff --git a/testing/test_hobble.py b/testing/test_hobble.py
index bf7ad08..161f153 100644
--- a/testing/test_hobble.py
+++ b/testing/test_hobble.py
@@ -18,10 +18,30 @@ from test_backup import make_big_notes
- cannot export
- cannot edit
- can view / use for kbd emulation
+- check notes not offered if none defined
+- check readonly features on notes when note pre-defined before entering hobbled mode
+- notes hidden if the exist but access disabled in policy
+
- check KT only offered if MS wallet setup
- scan a KT and have it rejected if not PSBT type: so R and E types
- MS psbt KT should still work in hobbled mode: test_teleport.py::test_teleport_ms_sign
+
- verify no settings menu
+- temp seeds are read only: no create, no rename, etc.
+- seed vault can be accessed tho
+
+- login sequence
+ 1) system has lgto value: should get bypass pin, main pin, delay, then main pin again
+ 2) using a trick PIN with delay, after bypass pin should delay
+ 3) bypass pin + duress wallet PIN => should work => but not a useful trick combo
+
+- word entry during login
+ - q1 vs mk4 style
+ - wrong values given, etc
+
+- update menu tree w/ hobble mode view
+- verify whitelist of QR types is correct when in hobbled mode
+ - no private key material, no teleport starting, unless "okeys" is set
'''
Why this scored 15/100
Community notes
Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.
The AI analysis stands alone for now. Submit a note if you can add evidence or important context.