Comment by ksteigerwald

Exactly — the test layer you're describing is what happens naturally when the units are small enough. Each canton can be smoke tested in isolation because its boundaries are fully declared. The composition gets tested as a graph of known units, not a blob of generated code. The 'test layer of production' becomes trivial when 90% of what you're deploying is already proven.