参考所有分组，完成尽量多的内容：收紧build source-map边界守卫

check-linuxcnc-build-source-map.sh

@@ -6,7 +6,8 @@ cd "$(dirname "$0")"
 # LinuxCNC source basis: this guard ties native/source-link/WASM build entry
 # points to LinuxCNC Submakefile source ownership, source manifests, persistent
 # build signatures, and source-backed WASM artifact ordering. It validates
-# build policy only; it does not add CNC behavior or expand smoke parsing.
+# build policy only; it does not add CNC behavior, expand smoke parsing, or
+# interpret G-code.
 linuxcnc_root=${LINUXCNC_ROOT:-../linuxcnc}
 linuxcnc_root=$(cd "$linuxcnc_root" && pwd)
 
@@ -149,6 +150,8 @@ for phrase in [
     "CONFIGURE_RULE_VERSION",
     "CNC_SIM_ENABLE_SMOKE_BACKEND=OFF",
     "Node smoke before browser smoke",
+    "does not interpret",
+    "G-code",
 ]:
     if phrase not in source_map:
         raise SystemExit(f"docs/linuxcnc-build-source-map.md missing boundary phrase: {phrase}")

docs/linuxcnc-build-source-map.md

@@ -49,6 +49,9 @@ behavior and must not expand the temporary smoke parser.
   copied artifacts with `cmp -s`, and run Node smoke before browser smoke.
 - Build directory overrides must be non-empty, whitespace-free, and outside the
   filesystem root.
+- The build source-map guard validates LinuxCNC build-source ownership,
+  manifest partitions, and artifact ordering only; it does not interpret
+  G-code.
 
 ## Checks
 
@@ -58,6 +61,7 @@ Run:
 ./check-linuxcnc-build-source-map.sh
 ./test-native.sh
 ./test-linuxcnc-source-link.sh
+./build-wasm.sh
 ```
 
 `check-linuxcnc-build-source-map.sh` keeps this document, LinuxCNC build-source