I reimplemented Nano block signing in pure Python. Two spec details break every port.

The preamble is not the byte 0x06 first (it is 6 stored big-endian in a 256-bit word), balance is 128-bit big-endian, and the address decode hides a third trap. The pinned vector that catches all three, and the clean-checkout test that runs with python3 alone.