Tighten composition admission, MCP hub ownership, and local planning

Split the remaining MCP operations hub by concern, trim unused complete-runtime
fixtures from the MCP conftest, and document the owned smoke / attached edges.

Require COMPOSITION_ADMISSION on complete-runtime composition modules
(AUTHORITY/WIRING/LIFECYCLE/DISCOVERY/REFERENCE/MIXED) with an architecture
ratchet, and report setup weights plus heaviest paths from the runtime
inventory.

Fold infrastructure and high-impact path policy into plan_manifest
[local_planning], and label local-test-ownership.json as exact-selector
overrides only.

Co-authored-by: morluto <morluto@users.noreply.github.com>

Author: cursoragent

.github/local-test-ownership.json

@@ -1,5 +1,6 @@
 {
   "version": 1,
+  "role": "Exact pytest selector overrides for non-test paths only. Lane/gate/impact authority lives in tests/plan_manifest.toml (compiled to topology + ci-impact). Do not treat this file as a second planner.",
   "overrides": {
     ".github/ci-impact.json": [
       "tests/boundary/process/tooling/test_ci_classification.py",

.github/scripts/plan-local-tests

@@ -18,6 +18,7 @@ from typing import NamedTuple
 ROOT = Path(__file__).resolve().parents[2]
 CLASSIFIER = ROOT / ".github" / "scripts" / "classify-ci-paths"
 OWNERSHIP = ROOT / ".github" / "local-test-ownership.json"
+PLAN_MANIFEST = ROOT / "tests" / "plan_manifest.toml"
 TOPOLOGY_MANIFEST = ROOT / "tests" / "topology.toml"
 
 # The planner scripts live without a package context; make the sibling helper
@@ -108,22 +109,28 @@ if not GATE_LANES:
 
 LINT_TYPECHECK_COMMAND = "make lint typecheck"
 
+
+def _local_planning() -> dict[str, object]:
+    raw = tomllib.loads(PLAN_MANIFEST.read_text(encoding="utf-8"))
+    section = raw.get("local_planning", {})
+    if not isinstance(section, dict):
+        raise ValueError("tests/plan_manifest.toml local_planning must be a table")
+    return section
+
+
+_LOCAL_PLANNING = _local_planning()
+
 # Repository paths whose impact is structural rather than ordinary Python
 # behavior.  Such changes route to ``make check-static`` (which already includes
 # lint-full, typecheck, architecture, and a package build) instead of the
 # lighter ``make lint typecheck`` handoff.
-INFRASTRUCTURE_PREFIXES = (
-    ".github/",
-    "Makefile",
-    "make/",
-    "pyproject.toml",
-    "uv.lock",
-    "tools/",
-    ".pre-commit-config.yaml",
-    ".jscpd.json",
-    "tests/topology.toml",
-    "tests/plan_manifest.toml",
+INFRASTRUCTURE_PREFIXES = tuple(
+    str(item) for item in _LOCAL_PLANNING.get("infrastructure_prefixes", ())
 )
+if not INFRASTRUCTURE_PREFIXES:
+    raise ValueError(
+        "tests/plan_manifest.toml local_planning.infrastructure_prefixes required"
+    )
 
 
 def is_infrastructure_path(path: str) -> bool:
@@ -165,11 +172,12 @@ def local_command_lanes(lanes: list[str]) -> list[str]:
 
 
 HIGH_IMPACT_PATHS = {
-    "src/jacobian/__init__.py",
-    "tests/conftest.py",
-    "pyproject.toml",
-    "uv.lock",
+    str(item) for item in _LOCAL_PLANNING.get("high_impact_paths", ())
 }
+if not HIGH_IMPACT_PATHS:
+    raise ValueError(
+        "tests/plan_manifest.toml local_planning.high_impact_paths required"
+    )
 
 
 class Change(NamedTuple):

docs/reference/testing-strategy.md

@@ -78,6 +78,26 @@ component lanes (prefer `open_domain_services` /
 `open_exact_domain_services`). Complete-runtime fixtures are visible only under
 owning composition, e2e, and named boundary confests.
 
+Every composition `test_*.py` that uses a complete-runtime fixture must declare
+a module-level admission category:
+
+```python
+COMPOSITION_ADMISSION = "AUTHORITY"  # or WIRING, LIFECYCLE, DISCOVERY, REFERENCE, MIXED
+```
+
+| Category | Meaning |
+| --- | --- |
+| `AUTHORITY` | Checker presence/absence, hydration, verify handoff, fail-closed trust |
+| `WIRING` | Portfolio install, catalog contracts, cross-service artifact identity |
+| `LIFECYCLE` | Bootstrap, attach, close, recovery, worker quiesce |
+| `DISCOVERY` | Whole-portfolio discovery ranking / intent routing |
+| `REFERENCE` | Portfolio reference-set / structure-canonicalization contracts |
+| `MIXED` | Temporary: ordinary capability matrices still pending domain demotion |
+
+`tools/check_test_architecture.py` fails closed when a complete-runtime
+composition module omits the declaration or uses an unknown category. Prefer
+shrinking `MIXED` over expanding it.
+
 A test's directory answers what kind of behavior it owns. A marker is retained
 only when it changes execution. The CI impact manifest maps changed paths to
 every explicitly owned lane, with additive multi-owner rules and a fail-closed
@@ -113,6 +133,15 @@ digest, configuration digests, and canonical plan digest. `make harbor-plan`
 uses the pinned Harbor runtime because task digests are part of the plan
 contract.
 
+Local planning reads `[local_planning]` from `tests/plan_manifest.toml` for
+infrastructure prefixes and high-impact paths. Exact pytest selectors for
+non-test paths remain in `.github/local-test-ownership.json` as a thin override
+map only—not a second lane/impact planner. Prefer folding stable overrides into
+manifest impact rules over growing that JSON.
+
+`make test-runtime-inventory` reports complete-runtime fixture setup weights and
+the heaviest paths so demotions can target real cost.
+
 ### Local development and CI ownership
 
 The contributor quick path is `make setup PROFILE=core` followed by

tests/boundary/mcp/conftest.py

@@ -1,19 +1,19 @@
-"""MCP transport boundary test configuration."""
+"""MCP transport boundary test configuration.
+
+Only ``attached_complete_runtime`` is needed by this lane today
+(``test_mcp_inspection_relationship_compaction``). Fresh/authorized complete
+fixtures stay out of the MCP conftest so the lane does not hydrate unused
+portfolio templates.
+"""
 
 from __future__ import annotations
 
 from tests.support.complete_runtime_fixtures import (
     attached_complete_runtime,
-    authorized_complete_runtime,
-    authorized_portfolio_template,
     complete_portfolio_template,
-    fresh_complete_runtime,
 )
 
 __all__ = (
     "attached_complete_runtime",
-    "authorized_complete_runtime",
-    "authorized_portfolio_template",
     "complete_portfolio_template",
-    "fresh_complete_runtime",
 )