test(fase3): SC7 both profiles offline + gated Azure portfolio arm

tests/test_portfolio.py

@@ -150,3 +150,31 @@ async def test_c_execution_state_isolation_is_load_bearing(
         meter_factory=lambda: shared,
     )
     assert sh.runs[1].provenance.token_usage > sh.runs[0].provenance.token_usage
+
+
+@pytest.mark.parametrize("profile", ["local", "azure"])
+async def test_d_both_profiles_run_offline(
+    make_portfolio_client_factory, fresh_store, profile
+) -> None:
+    """SC7: both profiles drive the portfolio contract path OFFLINE under the synthetic client
+    (the path is actually executed, not just the backend instantiated). Teeth: ``resolve_model``
+    is a profile-dependent seam reachable WITHOUT egress — each profile resolves its own
+    configured model from the bundled model_map.json, and local != azure (deleting the azure
+    entry reddens this). Honest limitation: under an injected ``client_factory``, ``profile`` is
+    otherwise inert inside ``run_project`` (run.py:152,173 ``model="fake-model"``, the F9 standing
+    item); the end-to-end run proves the path executes under both, and ``resolve_model`` is the
+    only profile-dependent seam provable offline."""
+    from portfolio_optimiser.backends import resolve_model
+
+    result = await run_portfolio(
+        _PORTFOLIO_IDS,
+        profile,
+        store=fresh_store,
+        client_factory=make_portfolio_client_factory(REPLIES),
+    )
+    assert isinstance(result, PortfolioResult)
+    assert len(result.runs) == 3
+    assert all(isinstance(r, RunResult) for r in result.runs)
+    # Profile-dependent teeth (offline, no egress): each profile resolves its own model.
+    assert resolve_model(profile, "proposer")
+    assert resolve_model("local", "proposer") != resolve_model("azure", "proposer")