[cppbear]

Test functions and helpers in src/ previously contributed to raw coverage, and requesting XML plus JSON ran each candidate twice. Coverage now temporarily marks test-only modules/functions with #[coverage(off)], runs tests once, and exports JSON from the same data as XML. Production callees remain instrumented and candidate runs retain cargo-llvm-cov’s default cleanup.

The shared entry also powers utgen coverage -p <standalone-crate-copy> for original-test baselines without model configuration. Temporary same-line feature gates preserve line numbers and leave compiler flags untouched; source bytes saved at coverage entry are restored after successful runs and returned build/report errors. Preprocessing shares test identification, including standalone cfg(test) helpers. No new dependencies or fingerprinting were added; the regression script now compares bytes directly.

Validation on the pinned nightly and cargo-llvm-cov 0.6.16:

• cargo build --workspace --locked passed.
• cargo test --workspace --locked: 26 passed, one existing opt-in live-model test ignored.
• Full deterministic minimal pipeline passed: original tests still execute, test/helper records are absent, XML/JSON execute each test body once, production branches remain covered, per-candidate profiles do not accumulate, generation and repair succeed, and coverage source edits are restored after assertion/build/report failures.

Scope remains a standalone crate with src/ plus Cargo target entry files. Macro expansion, broader generation/repair recovery, forced-termination recovery, concurrency limits, and timeouts remain later work. Git history is retained.

Linux validation also passed for both the branch run and the PR run, including the full minimal pipeline.