ebefc4e358
The stub was added earlier this session as an X-CUBE-ALIRO compat shim back when we (incorrectly) believed the vendor firmware ignored the §10.2 step-up AID SELECT requirement and routed EXCHANGE directly to the Expedited AID (ACCE5501). Today's Path X work proved the vendor firmware actually DOES the §10.2 SELECT correctly once the upstream crypto interop is right. With M1B.1 / M1C.1 now landing the real EXCHANGE and ENVELOPE handlers on StepUpApplet (ACCE5502), the AliroApplet stub is strictly wrong: it would let stale expedited_device_counter state confuse the vendor library if the reader ever hit it. Spec-conformant readers route EXCHANGE to ACCE5502 after the step-up SELECT and never touch ACCE5501 with INS=0xC9. So AliroApplet returns SW_INS_NOT_SUPPORTED (0x6D00) for INS=0xC9 like any other unknown INS, and we ship one less compat shim. Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>