[Fix] (IntegrationTest): gate private split logs and repair control red-checks

scripts/ci/split_negative_controls.sh

@@ -42,8 +42,7 @@
 set -u
 
 if [ "${1:-}" = "--self-test" ]; then
-  bash "$(dirname "$0")/control_smoke_test.sh" &&
-    bash "$(dirname "$0")/testdata/split_private_log_smoke.sh"
+  bash "$(dirname "$0")/control_smoke_test.sh"
   exit $?
 fi
 
@@ -65,7 +64,8 @@ python3 "${log_helper}" check "${CTEST}" "$PWD" || exit 1
 # runtime fact inside each test process (MG_Config::Transport, ClientSession::Active(),
 # ImplementedVerbCount(), read by Harness/SplitRuntimePeek), so the only honest way to ask it from a
 # shell is to look at what the entries DID.
-"${CTEST}" -L integration-split -j 4 --no-tests=error --output-junit "${junit}"
+# The metadata ownership test shares the label but cannot arm runtime controls.
+"${CTEST}" -L integration-split -R '^DirectGLES\.Split\.' -j 4 --no-tests=error --output-junit "${junit}"
 baseline_rc=$?
 
 if [ ! -f "${junit}" ]; then
@@ -136,7 +136,9 @@ run_control() {
   echo "${name} turned ${matched} selected entries red, and the red carries the scenario's own diagnostic, as it must"
 }
 
-# E1: c1 ClientSession::Post emits MGLOG_F Fatal{BarrierViolation, "<slot>"}.
+# E1: c1 ClientSession::EmitAndWait emits MGLOG_F Fatal{BarrierViolation, "<slot>"}.
+# This asserts an observed overlap with the applier, which is timing-dependent.
+# Without that Fatal in a fresh selected file E1 fails; pixel/status fallbacks do not count.
 # Keep the ID-53-approved SmallRing selection as well as the default lane.
 run_control "negative control E1 (MOBILEGL_IPC_VERB_BARRIER=0)" \
   'DirectGLES\.Split\.(SmallRing\.)?(Triangle|ClearThenReadPixels)' \