One host needs its original address
A partner expects the original source for a single server. A general manual hide rule and a narrower no-translation exception both match the test connection.
1. How would you explain the partner seeing the egress IP?
Read the worked answer
Inspect the order of the two manual rules. If the broad rule is first, the exception cannot select the flow. In a lab, put the narrow exception first, install the policy and start a fresh connection.