diff --git a/infra/deploy-runner/test_device_manager_control_plane_artifacts.py b/infra/deploy-runner/test_device_manager_control_plane_artifacts.py
index 352425d..cb97dae 100644
--- a/infra/deploy-runner/test_device_manager_control_plane_artifacts.py
+++ b/infra/deploy-runner/test_device_manager_control_plane_artifacts.py
@@ -1515,6 +1515,42 @@ class DeviceManagerControlPlaneArtifactsTest(unittest.TestCase):
         )
         runtime_acceptance.assert_called_once_with()
 
+    def test_manager_v3_apply_gate_uses_private_egress_core_boundary(self):
+        entries = RUNNER.DEVICE_PLANE_MANAGER_RELEASE_V3_ENTRIES
+        services = ("device-manager",)
+        with (
+            mock.patch.object(
+                RUNNER,
+                "healthcheck_compose_service_with_grace",
+            ) as service_health,
+            mock.patch.object(RUNNER, "healthcheck_url") as url_health,
+            mock.patch.object(
+                RUNNER,
+                "validate_device_manager_control_plane_runtime",
+            ) as runtime_acceptance,
+        ):
+            RUNNER.run_healthchecks("device-plane", entries, services)
+
+        service_health.assert_called_once_with(
+            "device-plane",
+            "device-manager",
+        )
+        self.assertEqual(
+            [call.args for call in url_health.call_args_list],
+            [
+                (check,)
+                for check in RUNNER.component_healthchecks(
+                    "device-plane",
+                    entries,
+                    services,
+                )
+            ],
+        )
+        runtime_acceptance.assert_called_once_with(
+            require_edge_channel=True,
+            core_network_mode="private-egress",
+        )
+
     def test_upgrade_v2_apply_gate_checks_preserved_runtime_and_edge_contract(self):
         entries = RUNNER.DEVICE_PLANE_EDGE_CORE_CHANNEL_UPGRADE_V2_ENTRIES
         services = ("device-control-core",)