diff --git a/roles/heat/.ci-selective-test b/roles/heat/.ci-selective-test
new file mode 100644
index 0000000000..dae7fe1187
--- /dev/null
+++ b/roles/heat/.ci-selective-test
@@ -0,0 +1,5 @@
+This temporary marker exercises Heat selective CI planning. Only the
+canonical AIO job should deploy Heat and its functional dependency closure.
+The alternate network backend and dedicated scenario jobs must skip. Tempest
+must validate the public Heat endpoint with the original CI issuer CA, while
+the internal Keystone bootstrap remains on its configured HTTP endpoint.
diff --git a/roles/octavia/.ci-selective-test b/roles/octavia/.ci-selective-test
new file mode 100644
index 0000000000..92e8b70429
--- /dev/null
+++ b/roles/octavia/.ci-selective-test
@@ -0,0 +1,5 @@
+This temporary marker exercises Octavia selective CI planning. Only the
+canonical Open vSwitch AIO job should deploy Octavia and its functional
+dependency closure. The alternate network backend and dedicated scenario jobs
+must skip, and Tempest must verify the public service catalog with the original
+CI issuer CA before exercising load-balancer tests.