@@ -24,10 +24,15 @@ flowchart LR
 | REQ-EXECUTION-SCHEDULE-001 | Preserve ordinary maximum 50 and existing heavy and replicated-cluster test ownership. Use keyed `NotInParallel` for the default `RequestCqrsDataSource`'s mutable `PerTestSession` fixture. | AC-EXECUTION-SCHEDULE-001: `RequestCqrsFixtureScheduling.SharedSession` identifies the same collision domain in `RequestCqrsBoundaryTests`, `RequestCqrsFatalSettlementTests`, `RequestCqrsRoutingTests`, `MultiLaneReceiveWholeFlowTests` and `ConnectionProducerCleanupTests`. Existing methods and arguments remain unchanged; execute the original ordinary cohort. |
 | REQ-EXECUTION-SCHEDULE-002 | Permit independent ANN, text and connection fixtures to overlap unrelated work while retaining original cancellation and joined shutdown. Shared serialization uses its existing concurrent provider registry and per-call serializer sessions. | AC-EXECUTION-SCHEDULE-002: `RequestCqrsAnnMaintenanceTests`, `RequestCqrsTextMaintenanceTests`, `ConnectionAwaitedSettlementTests` and `RequestCqrsAnnEnrollmentAckTests` have no blanket exclusion. Their actual owned factory or explicit constructor creates their database/runtime fixture. Run these original operation cases alongside the ordinary cohort. |
 | REQ-EXECUTION-SCHEDULE-003 | Prove independent fixture overlap with observable original operation barriers, distinct ownership and substantive stored results. | AC-EXECUTION-SCHEDULE-003: `ConnectionFixtureConcurrencyTests.IndependentlyOwnedConnectionsReachBothOriginalBarriersAndSettle` starts two original `ConnectionScenario` fixtures. Both actual signed commands reach `RequestStarted` before either releases. Distinct directories, connection IDs, work owners and grain identities, persisted principal binding, producer disposal, both committed records and signed close are asserted. |
-| REQ-EXECUTION-SCHEDULE-004 | Preserve actual global-resource exclusion until that resource's owner supplies a qualified narrower contract. Do not infer isolation from fixture names. | AC-EXECUTION-SCHEDULE-004: `OrleansRuntimeTelemetryTests` retains its existing blanket exclusion because process-wide OpenTelemetry capture observes activity and meters through bounded exporters. Scheduling does not modify telemetry capture, runner settings or any heavy-test policy. |
+| REQ-EXECUTION-SCHEDULE-004 | Preserve actual global-resource exclusion until that resource's owner supplies a qualified narrower contract. Do not infer isolation from fixture names. | AC-EXECUTION-SCHEDULE-004: `OrleansRuntimeTelemetryTests` retains blanket exclusion for process-wide metric capture. Its bounded activity exporter selects traces registered before each owned operation starts, and privacy sentinels select the original caller parent. Both capture isolation and exhaustion controls remain mandatory ordinary tests. |
 
 ## Source map and evidence
 
 The implementation paths are `tests/KeyLoad.FunctionalTests/OrleansExecution/{Cases,Fixtures,Helpers}/` and the existing `tests/KeyLoad.FunctionalTests/Messaging/Cases/MultiLane/MultiLaneReceiveWholeFlowTests.cs`. Changes comprise the shared-session key, guarded attribute changes and the genuine two-fixture whole operation case. Frontend, public SDK/MCP operations and server database execution are N/A: this work changes test scheduling and adds original-fixture evidence.
 
+The named functional shard runner uses four concurrent test slots on local and CI
+runners. This resource bound is declared in `ci-test-shards.json`; the Aspire-owned
+TUnit entry retains its separately validated ordinary maximum of 50. Host startup
+and operation phases retain their own deadlines, including flows owning two hosts.
+
 Qualification: the focused cases and the ordinary cohort must run with maximum 50 through the TUnit entry; the solution build, process recovery and Aspire replicated-cluster .NET SDK/official MCP gates remain mandatory and are not proven by this document.
@@ -102,11 +102,18 @@ principal, raw routing ID, private exception text or exemplar attribute escapes.
 Concurrent principals keep distinct request contexts. Immutable privacy sentinels
 in an actual operation span prove fail-closed suppression while the operation
 keeps its correct outcome. Capture is bounded and every provider is flushed and
-joined. `OrleansRuntimeTelemetryTests` on `RequestCqrsClusterFixture` own the
+joined. `OrleansRuntimeTelemetryTests` on `RequestCqrsHostedRuntimeFixture` own the
 cases; no synthetic exported span, raw-tag export, relaxed assertion, new
 provider or higher limit is permitted. SDK/MCP cluster qualification remains
 mandatory.
 
+The activity capture registers each original operation trace before starting its
+parent and retains every exported span in that trace within the existing bound.
+The sentinel targets that caller's direct application span. Process-wide metrics
+retain the whole-operation test's `NotInParallel` ownership. Separate required
+capture controls prove unrelated trace isolation and visible capacity exhaustion;
+they are not whole-operation coverage contributors.
+
 ## Verification and rollout
 
 After code changes: `dotnet build KeyLoad.slnx --no-restore -warnaserror`,
 
@@ -24886,9 +24886,9 @@
       "methodName": "ScheduleDoesNotPersistAmbientCallerTraceState",
       "instanceName": "ScheduleDoesNotPersistAmbientCallerTraceState",
       "sourcePath": "tests/KeyLoad.FunctionalTests/Messaging/Cases/RuntimeSaga/SagaTimeoutTraceIsolationTests.cs",
-      "sourceSha256": "3ec76f59f1e53428e0324fcd43515e7290c0fa6ff82d1a22b3b692f05efb92d7",
+      "sourceSha256": "b0b76b525c2c79d26d9a83845fc2fd61e08f5f814d1aacc1acec9ba28d09857a",
       "lineNumber": 16,
-      "endLineNumber": 33,
+      "endLineNumber": 46,
       "classification": "functional",
       "exclusionReason": null,
       "requirements": [
@@ -66259,12 +66259,52 @@
       ],
       "nonContributorReason": "required-control",
       "reviewBasis": "Executes the actual governance CLI against owned positive and negative source cases; it controls test path ownership and does not execute a database operation."
+    },
+    {
+      "className": "KeyLoad.FunctionalTests.OrleansExecution.OrleansTelemetryCaptureIsolationTests",
+      "reportClassName": "KeyLoad.FunctionalTests.OrleansExecution.OrleansTelemetryCaptureIsolationTests",
+      "methodName": "AnOwnedTraceStillReportsExhaustedCaptureCapacity",
+      "instanceName": "AnOwnedTraceStillReportsExhaustedCaptureCapacity",
+      "sourcePath": "tests/KeyLoad.FunctionalTests/OrleansExecution/Cases/Orleans/OrleansTelemetryCaptureIsolationTests.cs",
+      "sourceSha256": "77e4e35c0925c875b094b32a10025eafc0edf12582c8bb6c6e0fd8a4d24bf85e",
+      "lineNumber": 30,
+      "endLineNumber": 42,
+      "classification": "required-non-contributor",
+      "exclusionReason": null,
+      "requirements": [
+        "REQ-ORL-012"
+      ],
+      "acceptance": [
+        "AC-ORL-012"
+      ],
+      "nonContributorReason": "required-control",
+      "reviewBasis": "Real OpenTelemetry provider/exporter capture isolation and exhaustion control. Required ordinary test; no database operation or distributed telemetry acceptance is claimed."
+    },
+    {
+      "className": "KeyLoad.FunctionalTests.OrleansExecution.OrleansTelemetryCaptureIsolationTests",
+      "reportClassName": "KeyLoad.FunctionalTests.OrleansExecution.OrleansTelemetryCaptureIsolationTests",
+      "methodName": "UnrelatedTracesLeaveCapacityForTheCompleteOwnedTrace",
+      "instanceName": "UnrelatedTracesLeaveCapacityForTheCompleteOwnedTrace",
+      "sourcePath": "tests/KeyLoad.FunctionalTests/OrleansExecution/Cases/Orleans/OrleansTelemetryCaptureIsolationTests.cs",
+      "sourceSha256": "77e4e35c0925c875b094b32a10025eafc0edf12582c8bb6c6e0fd8a4d24bf85e",
+      "lineNumber": 11,
+      "endLineNumber": 28,
+      "classification": "required-non-contributor",
+      "exclusionReason": null,
+      "requirements": [
+        "REQ-ORL-012"
+      ],
+      "acceptance": [
+        "AC-ORL-012"
+      ],
+      "nonContributorReason": "required-control",
+      "reviewBasis": "Real OpenTelemetry provider/exporter capture isolation and exhaustion control. Required ordinary test; no database operation or distributed telemetry acceptance is claimed."
     }
   ],
   "coverageGroups": [
     {
       "groupId": "unit-functional-01",
-      "selector": "/KeyLoad.FunctionalTests/*/(AggregateReplayS*)|(AnalyticsComp*)|(AnnLifetimeD*)|(AnnPublicR*)|(AnnSeedC*)|(AnnSeedF*)|(AnnWaitA*)|(AtomicPartitionRosterB*)|(Bi*)|(Bm25OriginalP*)|(Bm25R*)|(CacheReadPermitC*)|(ChunkC*)|(ChunkManifestT*)|(ChunkW*)|(CliBackupJ*)|(CliBackupRestoreL*)|(Compe*)|(CompositionL*)|(CompositionP*)|(Conf*)|(ConnectionFi*)|(Cont*)|(CqrsT*)|(CredentialF*)|(CurrentA*)|(CurrentJ*)|(CurrentW*)|(DatabaseCompositionF*)|(Dec*)|(Disp*)|(DistributedSearchD*)|(DocumentE*)|(DocumentMutationImageT*)|(DropL*)|(DueF*)|(EventAppendC*)|(EventFeedPubSubA*)|(EventProjectionI*)|(EventQ*)|(FeedV*)|(Fie*)|(GlobalBranchWindowMergeB*)|(GraphCrossPartitionC*)|(GraphCrossPartitionRec*)|(GraphCrossPartitionS*)|(GraphIncomingE*)|(GraphIncomingV*)|(GraphSearchI*)|(GraphShortestPathC*)|(Ho*)|(HybridE*)|(Ini*)|(KeyCodecI*)|(KeyCodecM*)|(KeyLoadClientT*)|(KeyLoadQ*)|(LiveQ*)|(Man*)|(McpAuthenticationE*)|(McpB*)|(McpE*)|(McpF*)|(McpGatewayP*)|(McpP*)|(McpRes*)|(MetadataB*)|(Metam*)|(MultiLaneC*)|(OperationH*)|(OrleansT*)|(PackedAnnConc*)|(PackedAnnF*)|(PackedAnnOwner*)|(Partia*)|(PartitionQueryC*)|(PartitionQueryPublicC*)|(PartitionRecordC*)|(PartitionStoragePu*)|(ProjectionPr*)|(ProjectionR*)|(PublicN*)|(QueueA*)|(QueueEn*)|(QueueLifecycleC*)|(QueueLifecycleN*)|(QueueLifecycleP*)|(QueueO*)|(ReadB*)|(ReadCutCa*)|(ReadD*)|(ReadExecutionBudgetGrantC*)|(ReadOnlyCollectionV*)|(RelationalL*)|(RelationalQ*)|(RemoteTransferL*)|(RemoteTransferRec*)|(RemoteTransferRet*)|(RequestCqrsF*)|(ResourcePa*)|(ResourcePolicyUpdateV*)|(RowRevisionI*)|(RuntimeJournalL*)|(SagaS*)|(SagaTimeoutR*)|(SagaTimeoutTe*)|(SampleAggregateT*)|(SampleChunkCod*)|(SampleChunkPar*)|(SampleChunkStoreF*)|(SampleO*)|(SampleRetentionR*)|(SampleRollupO*)|(SampleRollupW*)|(SdkPr*)|(Secu*)|(SqlBetweenB*)|(SqlBo*)|(SqlCr*)|(SqlInnerJoinD*)|(SqlInnerJoinS*)|(SqlModelViewB*)|(StorageR*)|(StoreO*)|(StreamTe*)|(SubscriptionLeaseV*)|(TargetInboxA*)|(TargetInboxCap*)|(TextBi*)|(TextBm25E*)|(TextOnlineW*)|(TextProjectionA*)|(TextProjectionO*)|(TextProjectionRem*)|(TextProv*)|(TextWaitF*)|(TextWaitObserve*)|(TimeP*)|(TimeSeriesR*)|(TopicSqlR*)|(TransactionP*)|(Un*)|(ValueO*)|(VectorR*)|(ZoneTreeCoordinatedPointCacheE*)|(ZoneTreePointCacheP*)/(*)&(!AcChunk002UnpairedCodeUnitsUseExactUtf16Encoding*)&(!AcCq001_TypedStorageHelpersRejectNullArgumentsBeforeWork*)&(!EmptyAndUnknownVersionsRemainFormatUnsupported*)&(!LiteralMalformedTagScalarEscapeTextAndTimestampVectorsFailClosed*)&(!LiteralNoncanonicalAndUnrepresentableDecimalVectorsFailClosed*)&(!MultiLanePublicJsonDescriptorRetainsLiteralParentAndLeafPayloads*)&(!ValidUnicodeEscapesAndNumericExtremaRemainReadable*)",
+      "selector": "/KeyLoad.FunctionalTests/*/(AggregateReplayS*)|(AnalyticsComp*)|(AnnLifetimeD*)|(AnnPublicR*)|(AnnSeedC*)|(AnnSeedF*)|(AnnWaitA*)|(AtomicPartitionRosterB*)|(Bi*)|(Bm25OriginalP*)|(Bm25R*)|(CacheReadPermitC*)|(ChunkC*)|(ChunkManifestT*)|(ChunkW*)|(CliBackupJ*)|(CliBackupRestoreL*)|(Compe*)|(CompositionL*)|(CompositionP*)|(Conf*)|(ConnectionFi*)|(Cont*)|(CqrsT*)|(CredentialF*)|(CurrentA*)|(CurrentJ*)|(CurrentW*)|(DatabaseCompositionF*)|(Dec*)|(Disp*)|(DistributedSearchD*)|(DocumentE*)|(DocumentMutationImageT*)|(DropL*)|(DueF*)|(EventAppendC*)|(EventFeedPubSubA*)|(EventProjectionI*)|(EventQ*)|(FeedV*)|(Fie*)|(GlobalBranchWindowMergeB*)|(GraphCrossPartitionC*)|(GraphCrossPartitionRec*)|(GraphCrossPartitionS*)|(GraphIncomingE*)|(GraphIncomingV*)|(GraphSearchI*)|(GraphShortestPathC*)|(Ho*)|(HybridE*)|(Ini*)|(KeyCodecI*)|(KeyCodecM*)|(KeyLoadClientT*)|(KeyLoadQ*)|(LiveQ*)|(Man*)|(McpAuthenticationE*)|(McpB*)|(McpE*)|(McpF*)|(McpGatewayP*)|(McpP*)|(McpRes*)|(MetadataB*)|(Metam*)|(MultiLaneC*)|(OperationH*)|(OrleansTelemetryA*)|(PackedAnnConc*)|(PackedAnnF*)|(PackedAnnOwner*)|(Partia*)|(PartitionQueryC*)|(PartitionQueryPublicC*)|(PartitionRecordC*)|(PartitionStoragePu*)|(ProjectionPr*)|(ProjectionR*)|(PublicN*)|(QueueA*)|(QueueEn*)|(QueueLifecycleC*)|(QueueLifecycleN*)|(QueueLifecycleP*)|(QueueO*)|(ReadB*)|(ReadCutCa*)|(ReadD*)|(ReadExecutionBudgetGrantC*)|(ReadOnlyCollectionV*)|(RelationalL*)|(RelationalQ*)|(RemoteTransferL*)|(RemoteTransferRec*)|(RemoteTransferRet*)|(RequestCqrsF*)|(ResourcePa*)|(ResourcePolicyUpdateV*)|(RowRevisionI*)|(RuntimeJournalL*)|(SagaS*)|(SagaTimeoutR*)|(SagaTimeoutTe*)|(SampleAggregateT*)|(SampleChunkCod*)|(SampleChunkPar*)|(SampleChunkStoreF*)|(SampleO*)|(SampleRetentionR*)|(SampleRollupO*)|(SampleRollupW*)|(SdkPr*)|(Secu*)|(SqlBetweenB*)|(SqlBo*)|(SqlCr*)|(SqlInnerJoinD*)|(SqlInnerJoinS*)|(SqlModelViewB*)|(StorageR*)|(StoreO*)|(StreamTe*)|(SubscriptionLeaseV*)|(TargetInboxA*)|(TargetInboxCap*)|(TextBi*)|(TextBm25E*)|(TextOnlineW*)|(TextProjectionA*)|(TextProjectionO*)|(TextProjectionRem*)|(TextProv*)|(TextWaitF*)|(TextWaitObserve*)|(TimeP*)|(TimeSeriesR*)|(TopicSqlR*)|(TransactionP*)|(Un*)|(ValueO*)|(VectorR*)|(ZoneTreeCoordinatedPointCacheE*)|(ZoneTreePointCacheP*)/(*)&(!AcChunk002UnpairedCodeUnitsUseExactUtf16Encoding*)&(!AcCq001_TypedStorageHelpersRejectNullArgumentsBeforeWork*)&(!EmptyAndUnknownVersionsRemainFormatUnsupported*)&(!LiteralMalformedTagScalarEscapeTextAndTimestampVectorsFailClosed*)&(!LiteralNoncanonicalAndUnrepresentableDecimalVectorsFailClosed*)&(!MultiLanePublicJsonDescriptorRetainsLiteralParentAndLeafPayloads*)&(!ValidUnicodeEscapesAndNumericExtremaRemainReadable*)",
       "classNames": [
         "KeyLoad.FunctionalTests.AnalyticsStore.AnalyticsCompositionTests",
         "KeyLoad.FunctionalTests.Authorization.CredentialFrameBudgetTests",
 
@@ -1,6 +1,5 @@
 using KeyLoad.ClusterTests.ClientApi;
 using KeyLoad.ClusterTests.OrleansExecution;
-using KeyLoad.ClusterTests.QueryExecution;
 
 namespace KeyLoad.ClusterTests.Messaging;
 
@@ -41,8 +40,10 @@ [new AdvanceQueueDeadline(state.Lane.Queue, QueueDeadlineSiloClusterProtocol.Mes
         var result = await admin.Sdk.CommitAsync(command, token);
         await Assert.That(result.IsSuccess).IsFalse();
         await Assert.That(result.Value).IsNull();
-        await SqlClusterProtocol.EqualAsync(Errors.Problem(ErrorCode.RevisionConflict,
-            QueueDeadlineSiloClusterProtocol.StaleDetail), result.Problem);
+        var expected = Errors.Problem(ErrorCode.RevisionConflict, QueueDeadlineSiloClusterProtocol.StaleDetail);
+        var actual = JsonDefaults.Serialize(result.Problem);
+        await Assert.That(actual.AsSpan().SequenceEqual(JsonDefaults.Serialize(expected))).IsTrue()
+            .Because(System.Text.Encoding.UTF8.GetString(actual));
         await QueueDeadlineSiloClusterCurrent.ObserveAsync(admin, state, token);
         var reply = await admin.Mcp.CallAsync(McpCallerTools.DocumentsCommit, command, token);
         _ = (await McpCallerAssertions.ErrorAsync(reply, ErrorCode.RevisionConflict, dispatched: true)).Value;
 
@@ -27,7 +27,20 @@ public async Task ScheduleDoesNotPersistAmbientCallerTraceState()
 
         await AssertIsolatedTraceAsync(scheduled, caller.TraceId.ToString(), saga.Hint);
         var shards = await fixture.JobHarness.CaptureOwnedShardsAsync(dueTime, CancellationToken.None);
-        await fixture.JobHarness.WaitUntilSettledAsync(shards, CancellationToken.None);
+        try
+        {
+            await fixture.JobHarness.WaitUntilSettledAsync(shards, CancellationToken.None);
+        }
+        catch (TimeoutException failure)
+        {
+            var current = fixture.Database.Database.InspectSaga(SagaPrincipalId, saga.Lane, saga.Id);
+            var counts = new List<string>();
+            foreach (var shard in shards)
+            {
+                counts.Add($"{shard.Id}: {await shard.GetJobCountAsync()} jobs, scheduled={shard.Id == scheduled.ShardId}");
+            }
+            throw new TimeoutException($"{failure.Message} Saga phase: {current?.Phase}; {string.Join("; ", counts)}", failure);
+        }
         var actual = fixture.Database.Database.InspectSaga(SagaPrincipalId, saga.Lane, saga.Id);
         await Assert.That(actual!.Phase).IsEqualTo(SagaPhase.TimedOut);
     }