Architecture Cut 46 / Visual Confirmation Actions

图片人工确认动作 Dry-run

把图片人工确认队列里的 approve、request-redraw、request-compliance-review、reject 拆成独立动作协议。 GET 输出动作清单，POST 只做 dry-run 校验；当前 committed=false，不记录最终批准，不推进地图、BBS 或正式清单。

Actions JSON 图片人工确认审计日志纠错事件 BBS动作范式清单预览

2动作协议

1可校验

1策略阻断

0批准动作

0重绘动作

2写入禁用

2源图证据

0源图不一致

Action Protocols

图片确认动作协议

当前为单资产/小范围详情，展示完整协议 payload、状态迁移和 MCP 目标。

策略阻断

请求合规复核 / 澳大利亚 A-REIT Logistics Warehouse

REITs Pixel Asset #AU-Logistics-07 / 澳大利亚 / pixel-map-pin / needs-pin-redraw

Action JSON

asset-visual-approval-human-confirmation-action-request-compliance-review-au-logistics-asx-warehouse-pixel-map-pinreits://asset-visual-approval-human-confirmation-action/request-compliance-review/au-logistics-asx-warehouse/pixel-map-pinactionDigest=f2cacf15dff228f7ff / from=needs-pin-redraw / to=needs-compliance-review

Source Evidencebbs-gap-local-generatedBBS Gap 本地生成文件已进入清单预览证据链，但 formalRegistryWritten 仍为 false。

/assets/virtual-assets/au-logistics-asx-warehouse/map-pin.pngfilesystem-probe / 479311 bytessha256=077713911555695829

localFileDetected=truesourceMatchesTransaction=truesourceEvidenceRequired=trueapprovalEvidenceWritten=false

图片占位审批占位

动作协议requiredRoles=ops / compliancerequiredInputs=4 / blockers=1

写入红线committed=false / finalApprovalRecorded=falseapprovalEvidenceWritten=false / registryPromotionAllowed=false

来源确认humanQueueReady=false / pendingItems=14sourceSha=07771391155569 / writeDisabled=true

writeDisabled=truefinalApprovalWriteDisabled=trueregistryWriteDisabled=truemapPublishDisabled=truebbsPostDisabled=truemapPublished=falsebbsPosted=false

status=blocked-by-policydryRunRequired=truewriteDisabled=truesourceEvidence=077713911555sourceMatchesTransaction=truefinalApprovalRecorded=falseregistryPromotionAllowed=false

{
  "table": "asset_visual_approval_human_confirmation_actions",
  "schemaVersion": "2026-06-visual-approval-human-confirmation-action-dry-run-v1",
  "actionId": "asset-visual-approval-human-confirmation-action-request-compliance-review-au-logistics-asx-warehouse-pixel-map-pin",
  "humanConfirmationId": "asset-visual-approval-human-confirmation-au-logistics-asx-warehouse-pixel-map-pin",
  "identityFixtureId": "asset-visual-approval-identity-fixture-au-logistics-asx-warehouse-pixel-map-pin",
  "action": "request-compliance-review",
  "sourceEvidenceType": "bbs-gap-local-generated",
  "sourceEvidencePublicPath": "/assets/virtual-assets/au-logistics-asx-warehouse/map-pin.png",
  "sourceEvidenceSha256": "0777139115556958290219088d2eaa658a4ba664db0fb9c5dcc78251122e9d5e",
  "sourceMatchesTransaction": true,
  "humanConfirmationDigest": "a797cae3789dc2c969322b3f9c43f29fcb5e1061775279f766031bec38b85b3b",
  "writeDisabled": true
}

{
  "action": "request-compliance-review",
  "assetSlug": "au-logistics-asx-warehouse",
  "candidateSlug": "au-logistics-asx-warehouse",
  "humanConfirmationId": "asset-visual-approval-human-confirmation-au-logistics-asx-warehouse-pixel-map-pin",
  "formatKey": "pixel-map-pin",
  "actorRole": "ops",
  "actorName": "visual-ops-reviewer",
  "reason": "dry-run 请求合规复核",
  "dryRun": true,
  "writeDisabled": true,
  "secondConfirm": false,
  "sourceEvidenceSha256": "0777139115556958290219088d2eaa658a4ba664db0fb9c5dcc78251122e9d5e"
}

{
  "action": "request-compliance-review",
  "actionLabel": "请求合规复核",
  "dryRun": true,
  "writeDisabled": true,
  "targetHumanConfirmationId": "asset-visual-approval-human-confirmation-au-logistics-asx-warehouse-pixel-map-pin",
  "targetIdentityFixtureId": "asset-visual-approval-identity-fixture-au-logistics-asx-warehouse-pixel-map-pin",
  "targetSourceEvidenceSha256": "0777139115556958290219088d2eaa658a4ba664db0fb9c5dcc78251122e9d5e",
  "sourceEvidenceRequired": true,
  "requiredRoles": [
    "ops"
  ],
  "requiredInputs": [
    "actorRole",
    "actorName",
    "reason",
    "secondConfirm"
  ],
  "blocked": true,
  "note": "该动作包只用于后续运营系统接入前的协议预览，不会改变状态或写外部系统。"
}

{
  "from": "needs-pin-redraw",
  "to": "needs-compliance-review",
  "committed": false,
  "finalApprovalRecorded": false,
  "approvalEvidenceWritten": false,
  "registryPromotionAllowed": false,
  "mapPublished": false,
  "bbsPosted": false,
  "note": "该动作协议只校验人工确认输入，不持久化状态，不写审批证据，不推进地图或正式清单。"
}

该动作包只用于后续运营系统接入前的协议预览，不会改变状态或写外部系统。

动作详情图片人工确认审计日志纠错事件确认 JSON 身份Fixture 证据事务证据包图片人审清单预览搜新闻

dry-run 可校验

请求合规复核 / 澳大利亚 A-REIT Logistics Warehouse

REITs Pixel Asset #AU-Logistics-07 / 澳大利亚 / isometric-nft-card / human-confirmation-ready

Action JSON

asset-visual-approval-human-confirmation-action-request-compliance-review-au-logistics-asx-warehouse-isometric-nft-cardreits://asset-visual-approval-human-confirmation-action/request-compliance-review/au-logistics-asx-warehouse/isometric-nft-cardactionDigest=f1ac5b02a1280c3d62 / from=human-confirmation-ready / to=needs-compliance-review

Source Evidencebbs-gap-local-generatedBBS Gap 本地生成文件已进入清单预览证据链，但 formalRegistryWritten 仍为 false。

/assets/virtual-assets/au-logistics-asx-warehouse/nft-card.pngfilesystem-probe / 2231294 bytessha256=ff92c10511adaaae91

localFileDetected=truesourceMatchesTransaction=truesourceEvidenceRequired=trueapprovalEvidenceWritten=false

图片占位审批占位

动作协议requiredRoles=ops / compliancerequiredInputs=4 / blockers=0

写入红线committed=false / finalApprovalRecorded=falseapprovalEvidenceWritten=false / registryPromotionAllowed=false

来源确认humanQueueReady=true / pendingItems=3sourceSha=ff92c10511adaa / writeDisabled=true

writeDisabled=truefinalApprovalWriteDisabled=trueregistryWriteDisabled=truemapPublishDisabled=truebbsPostDisabled=truemapPublished=falsebbsPosted=false

status=dry-run-readydryRunRequired=truewriteDisabled=truesourceEvidence=ff92c10511adsourceMatchesTransaction=truefinalApprovalRecorded=falseregistryPromotionAllowed=false

{
  "table": "asset_visual_approval_human_confirmation_actions",
  "schemaVersion": "2026-06-visual-approval-human-confirmation-action-dry-run-v1",
  "actionId": "asset-visual-approval-human-confirmation-action-request-compliance-review-au-logistics-asx-warehouse-isometric-nft-card",
  "humanConfirmationId": "asset-visual-approval-human-confirmation-au-logistics-asx-warehouse-isometric-nft-card",
  "identityFixtureId": "asset-visual-approval-identity-fixture-au-logistics-asx-warehouse-isometric-nft-card",
  "action": "request-compliance-review",
  "sourceEvidenceType": "bbs-gap-local-generated",
  "sourceEvidencePublicPath": "/assets/virtual-assets/au-logistics-asx-warehouse/nft-card.png",
  "sourceEvidenceSha256": "ff92c10511adaaae91e8f80f717f2d9aec09c62ca642321043bac9981c236cee",
  "sourceMatchesTransaction": true,
  "humanConfirmationDigest": "16ea22523bda1fbd54de699e6768940d311274f5feafd479f8839b633836c045",
  "writeDisabled": true
}

{
  "action": "request-compliance-review",
  "assetSlug": "au-logistics-asx-warehouse",
  "candidateSlug": "au-logistics-asx-warehouse",
  "humanConfirmationId": "asset-visual-approval-human-confirmation-au-logistics-asx-warehouse-isometric-nft-card",
  "formatKey": "isometric-nft-card",
  "actorRole": "ops",
  "actorName": "visual-ops-reviewer",
  "reason": "dry-run 请求合规复核",
  "dryRun": true,
  "writeDisabled": true,
  "secondConfirm": false,
  "sourceEvidenceSha256": "ff92c10511adaaae91e8f80f717f2d9aec09c62ca642321043bac9981c236cee"
}

{
  "action": "request-compliance-review",
  "actionLabel": "请求合规复核",
  "dryRun": true,
  "writeDisabled": true,
  "targetHumanConfirmationId": "asset-visual-approval-human-confirmation-au-logistics-asx-warehouse-isometric-nft-card",
  "targetIdentityFixtureId": "asset-visual-approval-identity-fixture-au-logistics-asx-warehouse-isometric-nft-card",
  "targetSourceEvidenceSha256": "ff92c10511adaaae91e8f80f717f2d9aec09c62ca642321043bac9981c236cee",
  "sourceEvidenceRequired": true,
  "requiredRoles": [
    "ops"
  ],
  "requiredInputs": [
    "actorRole",
    "actorName",
    "reason",
    "secondConfirm"
  ],
  "blocked": false,
  "note": "该动作包只用于后续运营系统接入前的协议预览，不会改变状态或写外部系统。"
}

{
  "from": "human-confirmation-ready",
  "to": "needs-compliance-review",
  "committed": false,
  "finalApprovalRecorded": false,
  "approvalEvidenceWritten": false,
  "registryPromotionAllowed": false,
  "mapPublished": false,
  "bbsPosted": false,
  "note": "该动作协议只校验人工确认输入，不持久化状态，不写审批证据，不推进地图或正式清单。"
}

动作详情图片人工确认审计日志纠错事件确认 JSON 身份Fixture 证据事务证据包图片人审清单预览搜新闻

动作分布

批准图片 dry-run0 个动作 / 0 阻断

请求重绘0 个动作 / 0 阻断

请求合规复核2 个动作 / 1 阻断

拒绝候选图片0 个动作 / 0 阻断

状态分布

dry-run 可校验1 个动作

需要人工输入0 个动作

策略阻断1 个动作

国家筛选

QA 与运营口径

approve-visual-dry-run 当前必须保持 blocked-by-policy，不能记录最终批准。

POST 接口必须携带 dryRun=true 和 writeDisabled=true。

approve-visual-dry-run 必须校验 sourceEvidenceSha256；该哈希必须等于人工确认记录里的源图片哈希。

所有动作都必须保持 committed=false、finalApprovalRecorded=false、approvalEvidenceWritten=false、registryPromotionAllowed=false。

request-redraw、request-compliance-review、reject 也只是协议预览，不得触发工单、BBS 或地图状态变更。

当前筛选范围输出 2 个图片人工确认动作协议，1 个可做 dry-run 输入校验。

Action Dry-run 只校验输入、角色和阻断策略，不持久化确认状态。

当前有 2 个动作绑定本地生成源图证据；sourceEvidence 只作为图片上下文，不等同于审批证据 URI。

未来接入真实审批前，需要将该协议接入登录、MFA、证据 URI、审计日志和回滚机制。

当前筛选没有 BBS Gap 图片确认动作协议 dry-run。

POST 边界

POST 只返回校验结果；`dryRun=true` 和 `writeDisabled=true` 是强制字段。

批准动作还必须携带匹配的 `sourceEvidenceSha256`；它只证明源图上下文，不代表审批证据已上传。

批准动作即使传入完整字段，也会因为当前策略保持 blocked-by-policy。