参考所有分组，完成尽量多的内容：收紧WASM shims source-map边界守卫

docs/linuxcnc-wasm-shims-source-map.md

@@ -32,6 +32,11 @@ only; it must not add CNC behavior and must not expand the temporary smoke parse
 - Each shim source must keep a nearby `LinuxCNC source basis:` comment naming the LinuxCNC source it adapts.
 - Every LinuxCNC source named above must remain tracked in the RS274/WASM manifest as `core`, `header`, or `metadata`.
 - These shims are browser-safe LinuxCNC adaptations for source-link probes; they are not new interpreter behavior.
+- `test-native.sh`, `test-linuxcnc-source-link.sh`, and `build-wasm.sh` must
+  run `./check-linuxcnc-wasm-shims-source-map.sh` before consuming shim-backed
+  source-linked LinuxCNC objects or browser artifacts.
+- The WASM shims source-map guard validates LinuxCNC source/shim ownership and
+  manifest drift only; it does not interpret G-code.
 
 ## Checks
 
@@ -42,6 +47,7 @@ Run:
 ./test-linuxcnc-wasm-cmake-safe-probe.sh
 ./test-native.sh
 ./test-linuxcnc-source-link.sh
+./build-wasm.sh
 ```
 
 `check-linuxcnc-wasm-shims-source-map.sh` keeps this document, the CMake shim