Architecture Cut 72 / Local Source Correction Dual Control

源图审计纠错双人确认 Dry-run

为源图发布审计 correction 事件生成双人确认 schema、角色矩阵、同人禁止和 approvalDigest。当前只读预演：approvalWritten=false，correctionEventWritten=false，auditLogMutated=false，rollbackPackageMutated=false。

Dual JSON 纠错事件纠错事务 MCP Queue MCP Document Citation Lookup 回滚包 BBS 双签范式

2双签 schema

2可校验

2同人禁止

2Approval 禁写

2approvalDigest

0实际写入

Dual Control Approval

发起人与复核人门禁

当前展示单资产/小范围双签详情。

双人确认 dry-run 可校验

Redaction 请求 / 产业园 RAW Park

运营台 / 运营台人审 / 拒绝发布

Dual JSON

asset_visual_local_source_surface_release_audit_correction_approvalsinitiator=compliancereviewer=compliancesamePersonForbidden=truesecondConfirmRequired=true

approvalDigestb019fb20b663...b02abd

correctionDigestade6cec7e9ac...12f581

rollbackDigest2b37529c2e0b...c12ee3

dualControlDryRun=truedualControlWriteDisabled=trueapprovalWritten=falsecorrectionEventWritten=falseauditLogMutated=falserollbackPackageMutated=falsesessionCreated=falsemcpIndexWritten=falsetradingUseDisabled=true

Role Matrixops: initiate=true / review=false / 负责发起源图消费面纠错、核对回滚包和运营变更单，但不能绕过双人确认。qa: initiate=true / review=false / 负责 digest、source markers、consumer surface 与只读展示一致性复核。editor: initiate=true / review=true / 负责官网、BBS、AI 脚注和公开文案 redaction 口径复核。compliance: initiate=true / review=true / 负责 redaction、策略阻断、非投资建议和 no-trading 红线。admin: initiate=true / review=true / 可以填任一槽位，但不能绕过同人禁止、原审计不可变、原回滚包不可变和写入禁用。

{
  "table": "asset_visual_local_source_surface_release_audit_correction_approvals",
  "schemaVersion": "2026-07-local-source-surface-release-audit-correction-dual-control-v1",
  "approvalId": "asset-visual-local-source-surface-release-audit-correction-dual-control-cn-industrial-raw-park-ops-console-reject-surface-release",
  "approvalType": "local-source-surface-release-audit-correction-dual-control",
  "correctionEventId": "asset-visual-local-source-surface-release-audit-correction-cn-industrial-raw-park-ops-console-reject-surface-release",
  "correctionDigest": "ade6cec7e9ac6197440918a396ac530e3d5deda1ee3f338d84543ac61212f581",
  "targetAuditLogId": "asset-visual-local-source-surface-release-action-audit-cn-industrial-raw-park-ops-console-reject-surface-release",
  "targetAuditDigest": "e781b76312f93b4ba5075fa5783dff65050ef03fee95761067565761235cc757",
  "targetRollbackPackageId": "asset-visual-local-source-surface-release-rollback-cn-industrial-raw-park-ops-console-reject-surface-release",
  "targetRollbackDigest": "2b37529c2e0bb594d739f5213567fc79e81d6ab94049ade4e2436a6d9fc12ee3",
  "actionDigest": "c6ecf3fef93296d5a72e3229478a9d6ba4da8780a385755aea3b9c493e7b5b44",
  "releaseDigest": "baada1e5c12c5385e5fba06eff1057205015a7ca4dd9c7a9ee422d92eccea0f7",
  "sourceManifestDigest": "75abda10409e72a970c171bbc58343581cdf094d5dfb9b3e45281ffcd89ebd6a",
  "correctionType": "redaction-request",
  "consumer": "ops-console",
  "surface": "ops-console",
  "initiatorRole": "compliance",
  "reviewerRole": "compliance",
  "secondConfirmRequired": true,
  "samePersonForbidden": true,
  "originalAuditImmutable": true,
  "originalRollbackImmutable": true,
  "createdAt": "2026-07-31T18:33:40.903Z",
  "writeMode": "dry-run-only"
}

{
  "initiatorSlot": "local-source-correction-initiator",
  "reviewerSlot": "local-source-correction-reviewer",
  "futureIdentityProvider": "future:ops-sso + local-source-surface-release-actor-snapshot",
  "sessionStorage": "future:httpOnly-session + immutable correction approval snapshot",
  "proofRequiredBeforeWrite": true,
  "approvalWriteDisabled": true,
  "correctionWriteDisabled": true,
  "preserveAuditDigest": true,
  "preserveRollbackDigest": true,
  "noPublicSideEffect": true
}

双签详情 Tx Fix Fix Queue Fix Document 纠错事件回滚包资产详情

双人确认 dry-run 可校验

Redaction 请求 / 消费基础设施 Pixel Mall

运营台 / 运营台人审 / 拒绝发布

Dual JSON

asset_visual_local_source_surface_release_audit_correction_approvalsinitiator=compliancereviewer=compliancesamePersonForbidden=truesecondConfirmRequired=true

approvalDigest80cc0cd575fe...f4e2a7

correctionDigest262a4e34f79d...2cbf0d

rollbackDigeste0470993f9c9...6bebeb

{
  "table": "asset_visual_local_source_surface_release_audit_correction_approvals",
  "schemaVersion": "2026-07-local-source-surface-release-audit-correction-dual-control-v1",
  "approvalId": "asset-visual-local-source-surface-release-audit-correction-dual-control-cn-retail-infra-pixel-mall-ops-console-reject-surface-release",
  "approvalType": "local-source-surface-release-audit-correction-dual-control",
  "correctionEventId": "asset-visual-local-source-surface-release-audit-correction-cn-retail-infra-pixel-mall-ops-console-reject-surface-release",
  "correctionDigest": "262a4e34f79d6091f1c657d46c8a315ad294e47b263422ae319227986a2cbf0d",
  "targetAuditLogId": "asset-visual-local-source-surface-release-action-audit-cn-retail-infra-pixel-mall-ops-console-reject-surface-release",
  "targetAuditDigest": "80b90d4a01fa541a0c58c040c417685e656ade7d57735c4731894ff38eee8603",
  "targetRollbackPackageId": "asset-visual-local-source-surface-release-rollback-cn-retail-infra-pixel-mall-ops-console-reject-surface-release",
  "targetRollbackDigest": "e0470993f9c91dbf5d56f0f7e4168489192d0fc07664bbfe41c9ae5d2f6bebeb",
  "actionDigest": "79d8d11c0b40e5169fa59505beea14506e36329928e06f4da94e2ec8f9f7ab28",
  "releaseDigest": "eed6cd30cf3d0c0ff9b64a6eb7bd7fd335e8ca8f961ce6683db6b2d84b8a672c",
  "sourceManifestDigest": "f1f1ebd3d9dd3a9f755d98d23e5b22ef42ace31325210b479685226fcaf9a2c3",
  "correctionType": "redaction-request",
  "consumer": "ops-console",
  "surface": "ops-console",
  "initiatorRole": "compliance",
  "reviewerRole": "compliance",
  "secondConfirmRequired": true,
  "samePersonForbidden": true,
  "originalAuditImmutable": true,
  "originalRollbackImmutable": true,
  "createdAt": "2026-07-31T18:33:40.903Z",
  "writeMode": "dry-run-only"
}

{
  "initiatorSlot": "local-source-correction-initiator",
  "reviewerSlot": "local-source-correction-reviewer",
  "futureIdentityProvider": "future:ops-sso + local-source-surface-release-actor-snapshot",
  "sessionStorage": "future:httpOnly-session + immutable correction approval snapshot",
  "proofRequiredBeforeWrite": true,
  "approvalWriteDisabled": true,
  "correctionWriteDisabled": true,
  "preserveAuditDigest": true,
  "preserveRollbackDigest": true,
  "noPublicSideEffect": true
}