参考所有分组，完成尽量多的内容：收紧WASM shims source-map边界守卫

check-linuxcnc-wasm-shims-source-map.sh

@@ -6,7 +6,7 @@ cd "$(dirname "$0")"
 # LinuxCNC source basis: this guard ties the documented wasm-safe shim map to
 # the linuxcnc_wasm_safe_probe_shims CMake set, the RS274/WASM source manifest,
 # and the LinuxCNC sources each shim cites. It validates source coverage only;
-# it does not add CNC behavior or expand smoke parsing.
+# it does not add CNC behavior, expand smoke parsing, or interpret G-code.
 linuxcnc_root=${LINUXCNC_ROOT:-../linuxcnc}
 manifest=${1:-linuxcnc-rs274-wasm-source-files.txt}
 
@@ -134,10 +134,21 @@ for phrase in [
     "unavailable HAL lookup",
     "inactive-DB return values",
     "negative-status short-circuit behavior",
+    "./check-linuxcnc-wasm-shims-source-map.sh",
+    "does not interpret G-code",
 ]:
     if phrase not in source_map:
         raise SystemExit(f"docs/linuxcnc-wasm-shims-source-map.md missing boundary phrase: {phrase}")
 
+for entry in [
+    "test-native.sh",
+    "test-linuxcnc-source-link.sh",
+    "build-wasm.sh",
+]:
+    text = Path(entry).read_text(encoding="utf-8")
+    if "./check-linuxcnc-wasm-shims-source-map.sh" not in text:
+        raise SystemExit(f"{entry} must run ./check-linuxcnc-wasm-shims-source-map.sh")
+
 cmake_text = Path("core/CMakeLists.txt").read_text(encoding="utf-8")
 for shim_path in shim_paths:
     cmake_suffix = shim_path.removeprefix("core/")