From f489f8b2778058a7febf949379aff3b7f973975c Mon Sep 17 00:00:00 2001
From: yinyiqian1 <yqian@ripple.com>
Date: Tue, 15 Sep 2026 16:40:12 -0400
Subject: [PATCH] update

---
 .../app/ConfidentialMPTKeyRotation_test.cpp   | 54 +++++++++++++++++++
 1 file changed, 54 insertions(+)

diff --git a/src/test/app/ConfidentialMPTKeyRotation_test.cpp b/src/test/app/ConfidentialMPTKeyRotation_test.cpp
index 8348893526..8d4a9045ab 100644
--- a/src/test/app/ConfidentialMPTKeyRotation_test.cpp
+++ b/src/test/app/ConfidentialMPTKeyRotation_test.cpp
@@ -1744,6 +1744,60 @@ class ConfidentialMPTKeyRotation_test : public ConfidentialTransferTestBase
                 .err = tesSUCCESS,
             });
         }
+
+        // A lock does not block a migration.
+        {
+            Env env{*this, features};
+            Account const alice("alice");
+            Account const bob("bob");
+            Account const carol("carol");
+            Account const newIssuerKey("newIssuerKey");
+            Account const newerIssuerKey("newerIssuerKey");
+
+            ConfidentialEnv ct{env, alice, {{.account = bob}, {.account = carol}}};
+            ct.mpt.set({.account = alice, .holder = bob, .flags = tfMPTLock});
+            ct.mpt.set({.account = alice, .holder = carol, .flags = tfMPTLock});
+
+            // Rotate the issuer key so both holders' mirrors are stale.
+            ct.mpt.generateKeyPair(newIssuerKey);
+            ct.mpt.set({.account = alice, .issuerPubKey = ct.mpt.getPubKey(newIssuerKey)});
+
+            // The issuer migrates an individually locked holder.
+            ct.mpt.mirrorUpdate({
+                .account = alice,
+                .holder = bob,
+                .issuerEncryptedAmount = validCipher,
+                .err = tesSUCCESS,
+            });
+
+            // An individually locked holder migrates itself.
+            ct.mpt.mirrorUpdate({
+                .account = carol,
+                .issuerEncryptedAmount = validCipher,
+                .err = tesSUCCESS,
+            });
+
+            // Release the individual locks and lock the whole issuance instead. Rotate again so
+            // both mirrors are stale once more.
+            ct.mpt.set({.account = alice, .holder = bob, .flags = tfMPTUnlock});
+            ct.mpt.set({.account = alice, .holder = carol, .flags = tfMPTUnlock});
+            ct.mpt.set({.account = alice, .flags = tfMPTLock});
+            ct.mpt.generateKeyPair(newerIssuerKey);
+            ct.mpt.set({.account = alice, .issuerPubKey = ct.mpt.getPubKey(newerIssuerKey)});
+
+            ct.mpt.mirrorUpdate({
+                .account = alice,
+                .holder = bob,
+                .issuerEncryptedAmount = validCipher,
+                .err = tesSUCCESS,
+            });
+
+            ct.mpt.mirrorUpdate({
+                .account = carol,
+                .issuerEncryptedAmount = validCipher,
+                .err = tesSUCCESS,
+            });
+        }
     }
 
     void