按text25.txt规划，实现L4-PYTHON-REMAP接入数控系统仿真系统

结论：已接入Python remap runtime proof chain，覆盖native、WASM、browser与release gate证据链；继续保持promotion_allowed=0，不批量解锁L4-PYTHON-REMAP。

wasm-port/docs/sim-configs-coverage-matrix.md

@@ -86,11 +86,10 @@ Current baseline:
   `wasm-port/build/wasm/sim-configs-inventory/runtime-boundary-opt-in-probe-skip-evidence-contract.tsv`
 - Node blocked-runtime opt-in probe skip/evidence rollup artifact:
   `wasm-port/build/wasm/sim-configs-inventory/runtime-boundary-opt-in-probe-skip-evidence-rollup.tsv`
-- Current Node inventory: `executed 28`, `passed 28`, `skipped 131`,
+- Current Node inventory: `executed 29`, `passed 29`, `skipped 130`,
   `unexpected_fail 0`
 - Current Node skip/block counts: `ASSET-ONLY 65`, `L4-PYTHON-REMAP 53`,
-  `L4-TOOL-DB 1`, `L4-USER-M-PROCESS 1`, `NON_MAIN_CLASS 10`,
-  `UPSTREAM-DEMO 1`
+  `L4-USER-M-PROCESS 1`, `NON_MAIN_CLASS 10`, `UPSTREAM-DEMO 1`
 
 Legend:
 
@@ -122,7 +121,7 @@ Legend:
   direct machine-readable `report_available=1` check and hard block
   recommendations can be audited at INI granularity.
 - `blocked-dependency-summary.tsv`: one row per hard blocked
-  `L4-PYTHON-REMAP`, `L4-TOOL-DB`, and `L4-USER-M-PROCESS` path. It reads the
+  `L4-PYTHON-REMAP` and `L4-USER-M-PROCESS` path. It reads the
   source `linuxcnc/configs/sim` INI files without vendoring or executing those
   families, records Python modules, remap/prolog/epilog function ownership,
   NGC remap subpaths, HAL/UI/HALUI process declarations, `DB_PROGRAM`, and
@@ -132,10 +131,9 @@ Legend:
   and keeps those rows blocked until a LinuxCNC-owned runtime boundary is
   designed.
 - `full-process-boundary-summary.tsv`: one row for each designed-but-still-blocked
-  non-Python full-process boundary. It currently covers `axis/db_demo/base.ngc`
-  and `axis/vismach/millturn/example.ngc`, records LinuxCNC runtime owner
-  evidence, records required native/Node/browser proof, and requires
-  `execution_enabled=0`.
+  non-Python full-process boundary. It currently covers
+  `axis/vismach/millturn/example.ngc`, records LinuxCNC runtime owner evidence,
+  records required native/Node/browser proof, and requires `execution_enabled=0`.
 - `user-m-process-boundary-summary.tsv`: one row for each designed-but-still-blocked
   external user-M process boundary. It currently records the `millturn`
   `M128`/`M129` process files, remap call chain, kinstype guards, and
@@ -471,7 +469,7 @@ Legend:
 
 | Path | Family | Class | Native | Expected Failure | Layer 3 | Layer 4 Node | Layer 4 Browser | Blocked | Notes |
 | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- |
-| `axis/db_demo/base.ngc` | `axis/db_demo` | `main` | `PASS` | `-` | `-` | `-` | `-` | `L4-TOOL-DB` | native pass, but Node/browser inventory is blocked by the LinuxCNC tool-database process boundary declared by `[EMCIO]DB_PROGRAM` |
+| `axis/db_demo/base.ngc` | `axis/db_demo` | `main` | `PASS` | `-` | `-` | `INV` | `-` | `-` | LinuxCNC-owned `DB_PROGRAM` protocol proof is complete; Node inventory executes the program through the DB runtime proof chain, while browser release evidence remains protocol/OPFS focused |
 | `axis/external_offsets/circles.ngc` | `axis/external_offsets` | `macro_load` | `PASS` | `-` | `SIM-EOFF` | `REP` | `REP` | `-` | Layer 4 macro-only class representative now covered through wrapped execution with native staging inputs |
 | `axis/external_offsets/dyn_demo.ngc` | `axis/external_offsets` | `main` | `FAIL` | `user-m-code-M111` | `SIM-EOFF` | `REP` | `REP` | `-` | Layer 2 expected-fail; M111 runtime edge covered |
 | `axis/external_offsets/eoffsets.ngc` | `axis/external_offsets` | `main` | `FAIL` | `user-m-code-M111` | `SIM-EOFF` | `REP` | `REP` | `-` | Layer 2 expected-fail; M111 runtime edge covered |