[review-fix 1] Preserve baseline RC provenance

- Apply winning filter metadata before mode selection so baseline-admitted paths retain their RC ID, source, and tags without changing standard scheduling.
- Add coverage for an RC include overriding a local exclusion while preserving the baseline profile.

Source: review feedback
Validation: bazel test --nocache_test_results //comp/networkpath/npcollector/impl:impl_test

Author: AlexandreYang

comp/networkpath/npcollector/impl/baseline_test.go

@@ -15,6 +15,7 @@ import (
 
 	model "github.com/DataDog/agent-payload/v5/process"
 	"github.com/DataDog/datadog-agent/comp/networkpath/npcollector/impl/common"
+	"github.com/DataDog/datadog-agent/comp/networkpath/npcollector/impl/connfilter"
 	npmodel "github.com/DataDog/datadog-agent/comp/networkpath/npcollector/model"
 	"github.com/DataDog/datadog-agent/pkg/networkpath/payload"
 	"github.com/DataDog/datadog-agent/pkg/trace/teststatsd"
@@ -149,6 +150,34 @@ func TestBaselineKeepsStrongestObservationPerPath(t *testing.T) {
 	assert.Equal(t, []string{"10.0.0.1", "10.0.0.2", "10.0.0.3"}, scheduledBaselineHosts(t, collector))
 }
 
+func TestBaselinePreservesWinningRCProvenance(t *testing.T) {
+	_, collector := newTestNpCollector(t, map[string]any{
+		"network_path.connections_monitoring.baseline_tests_enabled": true,
+		"network_path.collector.monitor_ip_without_domain":           true,
+	}, &teststatsd.Client{}, nil)
+	filter, errs := connfilter.NewConnFilter([]connfilter.Config{
+		{Type: connfilter.FilterTypeExclude, MatchIP: "10.0.0.1"},
+		{
+			Type:         connfilter.FilterTypeInclude,
+			MatchIP:      "10.0.0.1",
+			TestConfigID: "dynamic-a",
+			Tags:         []string{"team:payments"},
+		},
+	}, "", false)
+	require.Empty(t, errs)
+	collector.filter = filter
+
+	collector.ScheduleNetworkPathTests(slices.Values([]npmodel.NetworkPathConnection{
+		baselineConn("10.0.0.1", 1),
+	}))
+
+	pathtest := <-collector.pathtestInputChan
+	assert.Equal(t, payload.DynamicTestProfileBaseline, pathtest.DynamicTestProfile)
+	assert.Equal(t, "dynamic-a", pathtest.TestConfigID)
+	assert.Equal(t, payload.TestConfigSourceRemote, pathtest.TestConfigSource)
+	assert.Equal(t, []string{"team:payments"}, pathtest.Tags)
+}
+
 func TestBaselineEmptySnapshotsSelectNothing(t *testing.T) {
 	_, collector := newTestNpCollector(t, map[string]any{
 		"network_path.connections_monitoring.baseline_tests_enabled": true,

comp/networkpath/npcollector/impl/npcollector.go

@@ -329,12 +329,17 @@ func (s *npCollectorImpl) scheduleNetworkPathTests(origin payload.PathOrigin, co
 			continue
 		}
 		pathtest := s.makePathtest(conn, origin)
+		pathtest.TestConfigID = evaluation.testConfigID
+		pathtest.Tags = evaluation.tags
+		if evaluation.testConfigID != "" {
+			pathtest.TestConfigSource = payload.TestConfigSourceRemote
+		}
 		if baselineMode {
 			selectedBaselineCandidates = addBaselinePath(selectedBaselineCandidates, pathtest, conn.Signals)
 			continue
 		}
 
-		if err := s.scheduleStandardNetworkPathTest(pathtest, evaluation); err != nil {
+		if err := s.scheduleOne(&pathtest); err != nil {
 			s.logger.Errorf("Error scheduling pathtests: %s", err)
 		}
 	}
@@ -344,16 +349,6 @@ func (s *npCollectorImpl) scheduleNetworkPathTests(origin payload.PathOrigin, co
 	_ = s.statsdClient.Count(common.NetworkPathCollectorMetricPrefix+"schedule.conns_received", int64(connCount), []string{}, 1)
 	_ = s.statsdClient.Gauge(common.NetworkPathCollectorMetricPrefix+"schedule.duration", s.TimeNowFn().Sub(startTime).Seconds(), nil, 1)
 }
-
-func (s *npCollectorImpl) scheduleStandardNetworkPathTest(pathtest common.Pathtest, evaluation pathEvaluation) error {
-	pathtest.TestConfigID = evaluation.testConfigID
-	pathtest.Tags = evaluation.tags
-	if evaluation.testConfigID != "" {
-		pathtest.TestConfigSource = payload.TestConfigSourceRemote
-	}
-	return s.scheduleOne(&pathtest)
-}
-
 func (s *npCollectorImpl) scheduleBaselinePaths(selected []baselineCandidate) {
 	for i := range selected {
 		if err := s.scheduleOne(&selected[i].path); err != nil {