From 8acb7fec734a4bad64325db61c50d137c4a09f51 Mon Sep 17 00:00:00 2001
From: Benjamin Faershtein <119711889+RCGV1@users.noreply.github.com>
Date: Wed, 22 Jul 2026 12:25:19 -0700
Subject: [PATCH] test: cover coerced packet signature policy

---
 test/test_admin_session_repro/test_main.cpp | 11 ++++++++---
 1 file changed, 8 insertions(+), 3 deletions(-)

diff --git a/test/test_admin_session_repro/test_main.cpp b/test/test_admin_session_repro/test_main.cpp
index 851f3c4c8..c93c1fd94 100644
--- a/test/test_admin_session_repro/test_main.cpp
+++ b/test/test_admin_session_repro/test_main.cpp
@@ -304,8 +304,8 @@ void test_local_security_config_keeps_private_key(void)
     admin->drainReply();
 }
 
-// A local client writes this device-owned policy, then receives the same value in its next config read.
-void test_local_security_config_round_trips_packet_signature_policy(void)
+// A local client reads the effective policy after a set. Builds without packet-signature support coerce it to Compatible.
+void test_local_security_config_applies_packet_signature_policy(void)
 {
     meshtastic_Config set = meshtastic_Config_init_zero;
     set.which_payload_variant = meshtastic_Config_security_tag;
@@ -319,8 +319,13 @@ void test_local_security_config_round_trips_packet_signature_policy(void)
 
     meshtastic_Config_SecurityConfig sec;
     TEST_ASSERT_TRUE(decodeSecurityFromReply(admin->reply(), sec));
+#if MESHTASTIC_EXCLUDE_PKI || MESHTASTIC_EXCLUDE_XEDDSA
+    TEST_ASSERT_EQUAL(meshtastic_Config_SecurityConfig_PacketSignaturePolicy_PACKET_SIGNATURE_POLICY_COMPATIBLE,
+                      sec.packet_signature_policy);
+#else
     TEST_ASSERT_EQUAL(meshtastic_Config_SecurityConfig_PacketSignaturePolicy_PACKET_SIGNATURE_POLICY_STRICT,
                       sec.packet_signature_policy);
+#endif
     admin->drainReply();
 }
 
@@ -672,7 +677,7 @@ void setup()
     RUN_TEST(test_session_gate_accepts_key_from_a_get_response);
     RUN_TEST(test_remote_security_config_omits_private_key);
     RUN_TEST(test_local_security_config_keeps_private_key);
-    RUN_TEST(test_local_security_config_round_trips_packet_signature_policy);
+    RUN_TEST(test_local_security_config_applies_packet_signature_policy);
     RUN_TEST(test_remote_network_config_omits_wifi_psk);
     RUN_TEST(test_local_network_config_keeps_wifi_psk);
     RUN_TEST(test_remote_mqtt_config_omits_password);