参考所有分组，完成尽量多的内容：收紧tooldata source-map边界守卫

docs/linuxcnc-tooldata-source-map.md

@@ -49,6 +49,11 @@ source-link/shim guard only; it must not add CNC behavior and must not expand th
   source directory tracked in the native RS274 manifest.
 - `build-wasm.sh` must run tooldata link and symbol probes before copying
   browser artifacts.
+- `test-native.sh`, `test-linuxcnc-source-link.sh`, and `build-wasm.sh` must
+  run `./check-linuxcnc-tooldata-source-map.sh` before consuming tooldata-backed
+  native objects, source-linked LinuxCNC objects, or browser artifacts.
+- The tooldata source-map guard validates LinuxCNC source/shim ownership and
+  manifest drift only; it does not interpret G-code.
 
 ## Checks
 
@@ -58,6 +63,7 @@ Run:
 ./check-linuxcnc-tooldata-source-map.sh
 ./test-native.sh
 ./test-linuxcnc-source-link.sh
+./build-wasm.sh
 ```
 
 `check-linuxcnc-tooldata-source-map.sh` keeps this document, LinuxCNC tooldata