参考所有分组，完成尽量多的内容：收紧build source-map边界守卫

docs/linuxcnc-build-source-map.md

@@ -49,6 +49,9 @@ behavior and must not expand the temporary smoke parser.
   copied artifacts with `cmp -s`, and run Node smoke before browser smoke.
 - Build directory overrides must be non-empty, whitespace-free, and outside the
   filesystem root.
+- The build source-map guard validates LinuxCNC build-source ownership,
+  manifest partitions, and artifact ordering only; it does not interpret
+  G-code.
 
 ## Checks
 
@@ -58,6 +61,7 @@ Run:
 ./check-linuxcnc-build-source-map.sh
 ./test-native.sh
 ./test-linuxcnc-source-link.sh
+./build-wasm.sh
 ```
 
 `check-linuxcnc-build-source-map.sh` keeps this document, LinuxCNC build-source