Both process owners trusted valid stdout without checking the exit code. Require zero exit status before replacing sessions or accepting widget updater success, preserving prior data and structured updater errors.

Add real-process regressions reproduced before the fix. Update usage, development, and Unreleased notes. TODO is unchanged: no parity item is completed.