Fix exact C# coverage exits and prepare coherent 0.4.3 source

.github/workflows/compiler-execution.yml

@@ -17,6 +17,11 @@ jobs:
       fail-fast: false
       matrix:
         runtime: [release-0.4.2, current]
+        include:
+          - runtime: release-0.4.2
+            worker-version: '0.4.2'
+          - runtime: current
+            worker-version: '0.4.3'
     steps:
       - name: Check out reviewed validation scenarios
         uses: actions/checkout@fbc6f3992d24b796d5a048ff273f7fcc4a7b6c09
@@ -40,7 +45,9 @@ jobs:
           set -euo pipefail
           printf 'CFS_RUNTIME_SOURCE=%s\n' "$(git -C runtime rev-parse HEAD)" >> "$GITHUB_ENV"
       - name: Build worker on disposable hosted runner
-        run: docker build --label org.opencontainers.image.revision="$CFS_RUNTIME_SOURCE" -t code-flow-worker:0.4.2 runtime/runner
+        env:
+          CFS_WORKER_IMAGE: code-flow-worker:${{ matrix.worker-version }}
+        run: docker build --label org.opencontainers.image.revision="$CFS_RUNTIME_SOURCE" -t "$CFS_WORKER_IMAGE" runtime/runner
       - name: Run realistic programs and deliberate failure controls
         working-directory: runtime
         env:
@@ -52,6 +59,12 @@ jobs:
           --runtime-source "$CFS_RUNTIME_SOURCE"
           --lane "$CFS_VALIDATION_LANE"
           --output ../validation/artifacts/compiler-validation
+      - name: Verify actual C# target exits and collector failures
+        if: matrix.runtime == 'current'
+        working-directory: runtime
+        env:
+          PYTHONPATH: ${{ github.workspace }}/runtime:${{ github.workspace }}/validation
+        run: python -m scripts.csharp_coverage_checks --runtime-source "$CFS_RUNTIME_SOURCE" --output ../validation/artifacts/csharp-coverage
       - name: Test the actual published frozen 0.4.2 service
         if: matrix.runtime == 'release-0.4.2'
         working-directory: validation
@@ -72,5 +85,6 @@ jobs:
             validation/artifacts/compiler-validation/results.json
             validation/artifacts/compiler-validation/summary.md
             validation/artifacts/released-service/*.json
+            validation/artifacts/csharp-coverage/*.json
           if-no-files-found: error
           retention-days: 3

.github/workflows/validate.yml

@@ -93,7 +93,7 @@ jobs:
         with:
           python-version: '3.12'
       - run: pip install -e '.[dev]'
-      - run: docker build -t code-flow-worker:0.4.2 runner
+      - run: docker build -t code-flow-worker:0.4.3 runner
       - run: python -m scripts.worker_checks
       - run: python -m scripts.private_worker_checks
       - run: python -m scripts.push_analysis

README.md

@@ -2,7 +2,7 @@
 
 An independently written successor to a group AI-in-SDLC capstone: a local-first development workbench for isolated polyglot checks, configurable AI proposals, and replayable revision evidence.
 
-**Version 0.4.2: bounded reports, safe shutdown and corrected draft verification.** Create an account, unlock your encrypted source/history workspace, and use the same interface in the desktop app or your browser. Filter diagnostics by file or unused-code category, select an exact line, inspect its read-only evidence snapshot, and open the editable draft only when its SHA-256 still matches. No public backend, shared login, analytics, ads or cloud AI calls are enabled by default. By [Jason Stys](https://github.com/JasonStys); [contact via LinkedIn](https://www.linkedin.com/in/jason-stys-31b30b351/).
+**Source version 0.4.3: exact instrumented C# exits.** The worker now separates the program's real exit status from the coverage collector, so approved nonzero returns can have fully measured coverage. Read the [fix and validation](docs/csharp-coverage.md). Create an account, unlock your encrypted source/history workspace, and use the same interface in the desktop app or your browser. Filter diagnostics by file or unused-code category, select an exact line, inspect its read-only evidence snapshot, and open the editable draft only when its SHA-256 still matches. No public backend, shared login, analytics, ads or cloud AI calls are enabled by default. By [Jason Stys](https://github.com/JasonStys); [contact via LinkedIn](https://www.linkedin.com/in/jason-stys-31b30b351/).
 
 Download OS-specific installers/portable packages from [Releases](https://github.com/JasonStys/code-flow-studio/releases). Read [private-account operation](docs/private-accounts.md), [current validation](docs/validation-polyglot.md), [historical Python-location validation](docs/validation-locations.md) and [security boundaries](docs/security.md). Packages are unsigned. This is a local development tool, not a public hostile-code SaaS sandbox or an autonomous correctness oracle.
 
@@ -16,7 +16,7 @@ Download OS-specific installers/portable packages from [Releases](https://github
 
 ## Hosted compiler acceptance
 
-The [realistic compiler suite](docs/compiler-execution.md) covers all twelve executable adapters with 72 independently authored input/output cases, deliberate compiler/runtime/wrong-answer controls, exact unused/uncovered anchors, and encrypted private-report replay. Its release lane identifies the published 0.4.2 source and tests the actual published Linux frozen service; a second lane tests the current checkout. Read the [dated observations and limits](docs/reports/hosted-compilers-2026-11-10.md) before interpreting a green run. This hosted validation does not install, repair or reset Docker on an end user's PC.
+The [realistic compiler suite](docs/compiler-execution.md) covers all twelve executable adapters with 72 independently authored input/output cases, deliberate compiler/runtime/wrong-answer controls, exact unused/uncovered anchors, and encrypted private-report replay. Its historical lane preserves the published 0.4.2 baseline, including its C# limitation; the current 0.4.3 lane requires the corrected target/collector protocol and fully measured approved C# cases. Read the [0.4.2 observations](docs/reports/hosted-compilers-2026-11-10.md) and [0.4.3 validation](docs/reports/csharp-coverage-2026-11-10.md). Published 0.4.2 packages are unchanged; this source fix neither installs an app nor alters Docker on an end user's PC.
 
 ## Features and limits
 

docs/README.md

@@ -1,5 +1,7 @@
 # Documentation
 
+- [0.4.3 exact C# coverage exits](csharp-coverage.md), [release notes](releases/v0.4.3.md) and [validation](reports/csharp-coverage-2026-11-10.md).
+
 - [Verified source inspection and draft navigation](source-navigation.md), with [observed practical-workflow validation](reports/practical-workflows-2026-11-09.md).
 - [Worker sanitizer compatibility and separate analyzer audit](worker-toolchain.md).
 - [0.4.2 delivery correction](releases/v0.4.2.md): required draft visibility for the read-only final verifier; coherent new product/worker metadata and preserved prior assets.