Architecture Cut 46 / Visual Confirmation Actions

图片人工确认动作 Dry-run

把图片人工确认队列里的 approve、request-redraw、request-compliance-review、reject 拆成独立动作协议。 GET 输出动作清单，POST 只做 dry-run 校验；当前 committed=false，不记录最终批准，不推进地图、BBS 或正式清单。

Actions JSON 图片人工确认审计日志纠错事件 BBS动作范式清单预览

2动作协议

0可校验

2策略阻断

1批准动作

1重绘动作

2写入禁用

2源图证据

0源图不一致

Action Protocols

图片确认动作协议

当前为单资产/小范围详情，展示完整协议 payload、状态迁移和 MCP 目标。

策略阻断

批准图片 dry-run / 加拿大 Canadian REIT Residential Node

REITs Pixel Asset #CA-Residential-09 / 加拿大 / isometric-nft-card / needs-compliance-review

Action JSON

asset-visual-approval-human-confirmation-action-approve-visual-dry-run-ca-residential-tsx-node-isometric-nft-cardreits://asset-visual-approval-human-confirmation-action/approve-visual-dry-run/ca-residential-tsx-node/isometric-nft-cardactionDigest=db73f92b3ee2c6f6be / from=needs-compliance-review / to=visual-approval-recorded

Source Evidencebbs-gap-local-generatedBBS Gap 本地生成文件已进入清单预览证据链，但 formalRegistryWritten 仍为 false。

/assets/virtual-assets/ca-residential-tsx-node/nft-card.pngfilesystem-probe / 2195051 bytessha256=4449c12e4aa77bdd2f

localFileDetected=truesourceMatchesTransaction=truesourceEvidenceRequired=trueapprovalEvidenceWritten=false

图片占位审批占位

动作协议requiredRoles=design-director / operations-ownerrequiredInputs=10 / blockers=5

写入红线committed=false / finalApprovalRecorded=falseapprovalEvidenceWritten=false / registryPromotionAllowed=false

来源确认humanQueueReady=false / pendingItems=14sourceSha=4449c12e4aa77b / writeDisabled=true

writeDisabled=truefinalApprovalWriteDisabled=trueregistryWriteDisabled=truemapPublishDisabled=truebbsPostDisabled=truemapPublished=falsebbsPosted=false

status=blocked-by-policydryRunRequired=truewriteDisabled=truesourceEvidence=4449c12e4aa7sourceMatchesTransaction=truefinalApprovalRecorded=falseregistryPromotionAllowed=false

{
  "table": "asset_visual_approval_human_confirmation_actions",
  "schemaVersion": "2026-06-visual-approval-human-confirmation-action-dry-run-v1",
  "actionId": "asset-visual-approval-human-confirmation-action-approve-visual-dry-run-ca-residential-tsx-node-isometric-nft-card",
  "humanConfirmationId": "asset-visual-approval-human-confirmation-ca-residential-tsx-node-isometric-nft-card",
  "identityFixtureId": "asset-visual-approval-identity-fixture-ca-residential-tsx-node-isometric-nft-card",
  "action": "approve-visual-dry-run",
  "sourceEvidenceType": "bbs-gap-local-generated",
  "sourceEvidencePublicPath": "/assets/virtual-assets/ca-residential-tsx-node/nft-card.png",
  "sourceEvidenceSha256": "4449c12e4aa77bdd2ff0ae7f386cabe6ecb04dd08865f8be7fde8984a9f68bf6",
  "sourceMatchesTransaction": true,
  "humanConfirmationDigest": "22525e35d71dec43828ea0efb671f623adb19f0bfc2c58c41e428d851ef80d8d",
  "writeDisabled": true
}

{
  "action": "approve-visual-dry-run",
  "assetSlug": "ca-residential-tsx-node",
  "candidateSlug": "ca-residential-tsx-node",
  "humanConfirmationId": "asset-visual-approval-human-confirmation-ca-residential-tsx-node-isometric-nft-card",
  "formatKey": "isometric-nft-card",
  "actorRole": "ops",
  "actorName": "visual-ops-reviewer",
  "reason": "dry-run 批准图片 dry-run",
  "dryRun": true,
  "writeDisabled": true,
  "secondConfirm": false,
  "sourceEvidenceSha256": "4449c12e4aa77bdd2ff0ae7f386cabe6ecb04dd08865f8be7fde8984a9f68bf6"
}

{
  "action": "approve-visual-dry-run",
  "actionLabel": "批准图片 dry-run",
  "dryRun": true,
  "writeDisabled": true,
  "targetHumanConfirmationId": "asset-visual-approval-human-confirmation-ca-residential-tsx-node-isometric-nft-card",
  "targetIdentityFixtureId": "asset-visual-approval-identity-fixture-ca-residential-tsx-node-isometric-nft-card",
  "targetSourceEvidenceSha256": "4449c12e4aa77bdd2ff0ae7f386cabe6ecb04dd08865f8be7fde8984a9f68bf6",
  "sourceEvidenceRequired": true,
  "requiredRoles": [
    "design-director",
    "operations-owner"
  ],
  "requiredInputs": [
    "actorRole",
    "actorName",
    "reason",
    "secondConfirm",
    "approverId",
    "approvedAt",
    "approvalEvidenceUri",
    "sourceEvidenceSha256"
  ],
  "blocked": true,
  "note": "批准包当前只做 dry-run，因无真实审批人、时间戳和证据 URI，不能记录最终批准。"
}

{
  "from": "needs-compliance-review",
  "to": "visual-approval-recorded",
  "committed": false,
  "finalApprovalRecorded": false,
  "approvalEvidenceWritten": false,
  "registryPromotionAllowed": false,
  "mapPublished": false,
  "bbsPosted": false,
  "note": "该动作协议只校验人工确认输入，不持久化状态，不写审批证据，不推进地图或正式清单。"
}

批准包当前只做 dry-run，因无真实审批人、时间戳和证据 URI，不能记录最终批准。

批准图片 dry-run 当前不能记录最终批准，必须保持 finalApprovalRecorded=false。

缺少真实 approverId、approvedAt、approvalEvidenceUri、approvalEvidenceDigest、sourceEvidenceSha256 和 MFA 校验。

仍有 14 个待确认项，不能进入最终批准。

humanQueueReady=false，不能进入批准校验。

动作详情图片人工确认审计日志纠错事件确认 JSON 身份Fixture 证据事务证据包图片人审清单预览搜新闻

策略阻断

请求重绘 / 加拿大 Canadian REIT Residential Node

REITs Pixel Asset #CA-Residential-09 / 加拿大 / isometric-nft-card / needs-compliance-review

Action JSON

asset-visual-approval-human-confirmation-action-request-redraw-ca-residential-tsx-node-isometric-nft-cardreits://asset-visual-approval-human-confirmation-action/request-redraw/ca-residential-tsx-node/isometric-nft-cardactionDigest=0396f66cba169c4e54 / from=needs-compliance-review / to=needs-pin-redraw

Source Evidencebbs-gap-local-generatedBBS Gap 本地生成文件已进入清单预览证据链，但 formalRegistryWritten 仍为 false。

/assets/virtual-assets/ca-residential-tsx-node/nft-card.pngfilesystem-probe / 2195051 bytessha256=4449c12e4aa77bdd2f

localFileDetected=truesourceMatchesTransaction=truesourceEvidenceRequired=trueapprovalEvidenceWritten=false

图片占位审批占位

动作协议requiredRoles=ops / designrequiredInputs=4 / blockers=1

写入红线committed=false / finalApprovalRecorded=falseapprovalEvidenceWritten=false / registryPromotionAllowed=false

来源确认humanQueueReady=false / pendingItems=14sourceSha=4449c12e4aa77b / writeDisabled=true

writeDisabled=truefinalApprovalWriteDisabled=trueregistryWriteDisabled=truemapPublishDisabled=truebbsPostDisabled=truemapPublished=falsebbsPosted=false

status=blocked-by-policydryRunRequired=truewriteDisabled=truesourceEvidence=4449c12e4aa7sourceMatchesTransaction=truefinalApprovalRecorded=falseregistryPromotionAllowed=false

{
  "table": "asset_visual_approval_human_confirmation_actions",
  "schemaVersion": "2026-06-visual-approval-human-confirmation-action-dry-run-v1",
  "actionId": "asset-visual-approval-human-confirmation-action-request-redraw-ca-residential-tsx-node-isometric-nft-card",
  "humanConfirmationId": "asset-visual-approval-human-confirmation-ca-residential-tsx-node-isometric-nft-card",
  "identityFixtureId": "asset-visual-approval-identity-fixture-ca-residential-tsx-node-isometric-nft-card",
  "action": "request-redraw",
  "sourceEvidenceType": "bbs-gap-local-generated",
  "sourceEvidencePublicPath": "/assets/virtual-assets/ca-residential-tsx-node/nft-card.png",
  "sourceEvidenceSha256": "4449c12e4aa77bdd2ff0ae7f386cabe6ecb04dd08865f8be7fde8984a9f68bf6",
  "sourceMatchesTransaction": true,
  "humanConfirmationDigest": "22525e35d71dec43828ea0efb671f623adb19f0bfc2c58c41e428d851ef80d8d",
  "writeDisabled": true
}

{
  "action": "request-redraw",
  "assetSlug": "ca-residential-tsx-node",
  "candidateSlug": "ca-residential-tsx-node",
  "humanConfirmationId": "asset-visual-approval-human-confirmation-ca-residential-tsx-node-isometric-nft-card",
  "formatKey": "isometric-nft-card",
  "actorRole": "ops",
  "actorName": "visual-ops-reviewer",
  "reason": "dry-run 请求重绘",
  "dryRun": true,
  "writeDisabled": true,
  "secondConfirm": false,
  "sourceEvidenceSha256": "4449c12e4aa77bdd2ff0ae7f386cabe6ecb04dd08865f8be7fde8984a9f68bf6"
}

{
  "action": "request-redraw",
  "actionLabel": "请求重绘",
  "dryRun": true,
  "writeDisabled": true,
  "targetHumanConfirmationId": "asset-visual-approval-human-confirmation-ca-residential-tsx-node-isometric-nft-card",
  "targetIdentityFixtureId": "asset-visual-approval-identity-fixture-ca-residential-tsx-node-isometric-nft-card",
  "targetSourceEvidenceSha256": "4449c12e4aa77bdd2ff0ae7f386cabe6ecb04dd08865f8be7fde8984a9f68bf6",
  "sourceEvidenceRequired": true,
  "requiredRoles": [
    "ops"
  ],
  "requiredInputs": [
    "actorRole",
    "actorName",
    "reason",
    "secondConfirm"
  ],
  "blocked": true,
  "note": "该动作包只用于后续运营系统接入前的协议预览，不会改变状态或写外部系统。"
}

{
  "from": "needs-compliance-review",
  "to": "needs-pin-redraw",
  "committed": false,
  "finalApprovalRecorded": false,
  "approvalEvidenceWritten": false,
  "registryPromotionAllowed": false,
  "mapPublished": false,
  "bbsPosted": false,
  "note": "该动作协议只校验人工确认输入，不持久化状态，不写审批证据，不推进地图或正式清单。"
}

该动作包只用于后续运营系统接入前的协议预览，不会改变状态或写外部系统。

动作详情图片人工确认审计日志纠错事件确认 JSON 身份Fixture 证据事务证据包图片人审清单预览搜新闻

动作分布

批准图片 dry-run1 个动作 / 1 阻断

请求重绘1 个动作 / 1 阻断

请求合规复核0 个动作 / 0 阻断

拒绝候选图片0 个动作 / 0 阻断

状态分布

dry-run 可校验0 个动作

需要人工输入0 个动作

策略阻断2 个动作

国家筛选

QA 与运营口径

approve-visual-dry-run 当前必须保持 blocked-by-policy，不能记录最终批准。

POST 接口必须携带 dryRun=true 和 writeDisabled=true。

approve-visual-dry-run 必须校验 sourceEvidenceSha256；该哈希必须等于人工确认记录里的源图片哈希。

所有动作都必须保持 committed=false、finalApprovalRecorded=false、approvalEvidenceWritten=false、registryPromotionAllowed=false。

request-redraw、request-compliance-review、reject 也只是协议预览，不得触发工单、BBS 或地图状态变更。

当前筛选范围输出 2 个图片人工确认动作协议，0 个可做 dry-run 输入校验。

Action Dry-run 只校验输入、角色和阻断策略，不持久化确认状态。

当前有 2 个动作绑定本地生成源图证据；sourceEvidence 只作为图片上下文，不等同于审批证据 URI。

未来接入真实审批前，需要将该协议接入登录、MFA、证据 URI、审计日志和回滚机制。

当前筛选没有 BBS Gap 图片确认动作协议 dry-run。

POST 边界

POST 只返回校验结果；`dryRun=true` 和 `writeDisabled=true` 是强制字段。

批准动作还必须携带匹配的 `sourceEvidenceSha256`；它只证明源图上下文，不代表审批证据已上传。

批准动作即使传入完整字段，也会因为当前策略保持 blocked-by-policy。