[yeongseon]

Summary

Finish the local-versus-certification command contract and add executable negative-run evidence for strict skip policies.

Changes

• Give local HTTP smoke its own Hatch entry point, label it non-certifying, allow App Insights skips explicitly and support a caller-selected local port.
• Make the Azure Makefile entry point require zero skips.
• Exercise missing App Insights configuration and a simulated removed OTel module in subprocesses; both must exit nonzero without cloud calls.
• Preserve the workflow skip guards, interpreter matrix, required contexts and release gates already merged in ci(test): fail certification and upstream-canary lanes that skip tests #628/build(make): stop reinstalling tooling per target and fail doctor on missing tools #631.

Validation

• The local entry-point regression failed before the command fix.
• Python 3.11.15 make check-all and make build passed: 882 passed, 4 skipped, 4 deselected, 12 warnings in 9.00s; coverage 96.26%.
• Negative subprocess runs are part of that suite: absent App Insights name exits 1 with FAIL_ON_SKIP; removed opentelemetry.sdk._logs exits nonzero rather than passing a skip. No Azure commands or HTTP requests execute in those negative cases.
• No live Azure certification was run. Local LSP tooling rejects private-worktree paths; repository mypy passed.

Related Issues

Closes #614

Merge authorized by the maintainer's explicit instruction, conditional on exact-head required CI and resolved review threads.

[yeongseon]

Reviewed exact head 56923e7: all five required contexts completed/success and no unresolved review threads. Local-only command cannot write certification; strict Azure entrypoint fails skips. Both offline negative subprocess cases ran as part of the recorded passing suite. Merge authorized by the maintainer’s explicit instruction.