接续上一轮，先做 L4-USER-M-PROCESS，完全接入仿真系统

结论：已将 L4-USER-M-PROCESS 的 millturn M128/M129 受控状态转换接入 virtual HAL、真实 browser simulation、OPFS 会话 payload、SDK API 和 release diagnostics validation；外部 user-M process execution 与 promotion 仍保持 locked，不伪装为 native process 解锁。

wasm-port/runtime/sdk/README.md

@@ -318,7 +318,9 @@ private page state.
   `executeHalcmd()`, `stepMotion()`, `stepMotionController()`,
   `getSimulationRuntimeReport()`, `getSimulationReplacementReport()`,
   `getSourceComplianceReport()`, `getSimConfigPromotionCandidateReport()`,
-  `getSimConfigMacroLoadFixtureReport()`, `getIntegrityReport()`,
+  `getSimConfigMacroLoadFixtureReport()`,
+  `getMillturnUserMProcessBoundaryReport()`,
+  `applyMillturnUserMProcessState()`, `getIntegrityReport()`,
   `getPinInventory()`, `getProjectReport()`, and `applyToInterpSdk()`.
 - `VIRTUAL_HAL_SIMULATION_RUNTIME_CAPABILITIES`,
   `VIRTUAL_HAL_SIMULATION_REPLACEMENT_TARGETS`,
@@ -339,6 +341,18 @@ private page state.
   `manifestEntries`, the matrix report checks those associated sim-config
   source files against the vendored LinuxCNC manifest and exposes
   `manifestChecked` plus `missingManifestFiles`.
+- `VIRTUAL_HAL_MILLTURN_USER_M_PROCESS_BOUNDARY`,
+  `createVirtualHalMillturnUserMProcessBoundaryReport()`, and
+  `applyVirtualHalMillturnUserMProcessState()` expose the controlled
+  millturn `M128`/`M129` user-M process boundary for browser/Node simulation.
+  The report names the LinuxCNC `millturn.ini`, `example.ngc`, Tcl M-code
+  scripts, and remap callers, then lists the source-derived
+  `motion.switchkins-type`, `kinstype.is-*`, and `ini.[xyz].*` HAL state
+  targets. `applyVirtualHalMillturnUserMProcessState()` can apply that
+  controlled state to the virtual HAL for simulation display. It keeps
+  `executionEnabled === false`, `promotionAllowed === false`, and
+  `processExecutionReady === false`; it does not execute arbitrary external
+  user-M processes or unlock `L4-USER-M-PROCESS`.
 - `VIRTUAL_HAL_SIM_CONFIG_PROMOTION_CANDIDATES` and
   `createVirtualHalSimConfigPromotionCandidateReport()` expose the current
   source-derived sim-config promotion candidate set. The first candidates keep