diff --git a/hack/e2e-chainsaw/clickhouse-backup/chainsaw-test.yaml b/hack/e2e-chainsaw/clickhouse-backup/chainsaw-test.yaml
index c1aa03e65..08064a252 100644
--- a/hack/e2e-chainsaw/clickhouse-backup/chainsaw-test.yaml
+++ b/hack/e2e-chainsaw/clickhouse-backup/chainsaw-test.yaml
@@ -101,8 +101,9 @@ spec:
 
   # The strategy Pod authenticates to the sidecar with the credentials in the
   # chart-emitted <release>-backup-api-auth Secret (env API_USERNAME /
-  # API_PASSWORD on both sides). Assert it exists and is populated — a rename
-  # or an empty password surfaces only as 401s at BackupJob time otherwise.
+  # API_PASSWORD on both sides). Assert it exists and carries both keys — a
+  # rename of the Secret or a dropped key surfaces only as 401s (or a Pod that
+  # never starts) at BackupJob time otherwise.
   - name: verify-backup-api-auth-secret
     try:
     - assert:
@@ -152,6 +153,11 @@ spec:
   - podLogs:
       selector: app.kubernetes.io/instance=clickhouse-clickhouse-test
       tail: 100
+  # The to-copy leg (step 07) restores into a second release; capture its Pod
+  # logs too so a failure isolated to that leg keeps its diagnostics.
+  - podLogs:
+      selector: app.kubernetes.io/instance=clickhouse-clickhouse-restore
+      tail: 100
   steps:
   - name: run
     try:
diff --git a/hack/select-e2e_test.bats b/hack/select-e2e_test.bats
index 323012714..1648c8262 100644
--- a/hack/select-e2e_test.bats
+++ b/hack/select-e2e_test.bats
@@ -99,6 +99,20 @@
     echo "$output" | grep -q "kubernetes-oidc-customconfig"
 }
 
+@test "clickhouse-application maps to both clickhouse suites" {
+    tmp=$(mktemp -d)
+    trap 'rm -rf "$tmp"' EXIT
+    cp -r packages/core/platform/sources "$tmp/sources"
+    echo "packages/apps/clickhouse/values.yaml" > "$tmp/diff"
+    output=$(hack/select-e2e.sh "$tmp/diff" "$tmp/sources")
+    # A ClickHouse chart-only change must select the plain clickhouse suite AND
+    # the backup contracts suite (which stands up the same chart with backup
+    # enabled) — that is the whole reason clickhouse-backup runs in CI. Match
+    # exact list tokens so "clickhouse" is not satisfied by "clickhouse-backup".
+    echo "$output" | tr ' ' '\n' | grep -xq clickhouse
+    echo "$output" | tr ' ' '\n' | grep -xq clickhouse-backup
+}
+
 @test "dashboards-only diff selects nothing (path is plural)" {
     tmp=$(mktemp -d)
     trap 'rm -rf "$tmp"' EXIT