ci: keep standalone lane free of release artifacts

Author: BitHighlander

.circleci/config.yml

@@ -37,6 +37,15 @@ jobs:
             rm -rf deps/python-keepkey
             mv ../.pykk deps/python-keepkey
 
+            # This is python-keepkey's standalone compatibility lane. Release
+            # OLED/PDF evidence is generated only by the exact-head firmware
+            # workflow, where the firmware and Python SHAs are pinned together.
+            # Do not inherit the firmware checkout's report/screenshot phase:
+            # it can describe a different (published/master) emulator and is
+            # therefore not release evidence for this Python PR.
+            cp deps/python-keepkey/.circleci/standalone-emulator-tests.sh \
+              scripts/emulator/python-keepkey-tests.sh
+
       # ────────────────────────────────────────────────────────────────
       # 3) Build the Docker-based emulator tests
       # ────────────────────────────────────────────────────────────────

.circleci/standalone-emulator-tests.sh

@@ -0,0 +1,35 @@
+#!/bin/sh
+set -e
+
+# python-keepkey's own CI is a compatibility test against the emulator supplied
+# by the firmware checkout. It deliberately does not produce OLED/PDF release
+# evidence. Authoritative display evidence is generated by keepkey-firmware CI,
+# which pins both repositories to exact candidate SHAs.
+
+mkdir -p /kkemu/test-reports/python-keepkey
+
+echo "=== Waiting for emulator ==="
+for attempt in $(seq 1 20); do
+    if echo -n "PINGPING" | nc -u -w1 kkemu 11044 2>/dev/null | grep -q PONG; then
+        echo "Emulator ready (attempt $attempt)"
+        break
+    fi
+    if [ "$attempt" -eq 20 ]; then
+        echo "Emulator did not become ready"
+        echo "1" > /kkemu/test-reports/python-keepkey/status
+        exit 1
+    fi
+    sleep 2
+done
+
+cd /kkemu/deps/python-keepkey/tests
+set +e
+KK_TRANSPORT_MAIN=kkemu:11044 \
+KK_TRANSPORT_DEBUG=kkemu:11045 \
+pytest -v --tb=short --timeout=60 --timeout-method=signal \
+    --junitxml=/kkemu/test-reports/python-keepkey/junit.xml
+pytest_status=$?
+set -e
+
+echo "$pytest_status" > /kkemu/test-reports/python-keepkey/status
+exit "$pytest_status"