参考所有分组，完成尽量多的内容：收紧browser-app source-map边界守卫

docs/linuxcnc-browser-app-source-map.md

@@ -37,6 +37,11 @@ must not expand the temporary smoke parser.
 - The app must require OPFS for browser program parsing and call
   `parseFileWithParameterFile(programPath, parameterPath, "linuxcnc", ...)`.
 - The visible backend selector must stay limited to the LinuxCNC RS274 backend.
+- `test-native.sh`, `test-linuxcnc-source-link.sh`, and `build-wasm.sh` must
+  run `./check-linuxcnc-browser-app-source-map.sh` before consuming app-backed
+  browser artifacts or source-linked LinuxCNC objects.
+- The browser app source-map guard validates LinuxCNC source-backed bridge
+  routing and OPFS policy only; it does not interpret G-code.
 
 ## Checks
 
@@ -46,6 +51,7 @@ Run:
 ./check-linuxcnc-browser-app-source-map.sh
 ./test-native.sh
 ./test-linuxcnc-source-link.sh
+./build-wasm.sh
 ```
 
 `check-linuxcnc-browser-app-source-map.sh` keeps this document, LinuxCNC source