Architecture Cut 72 / Local Source Correction Dual Control

源图审计纠错双人确认 Dry-run

为源图发布审计 correction 事件生成双人确认 schema、角色矩阵、同人禁止和 approvalDigest。当前只读预演：approvalWritten=false，correctionEventWritten=false，auditLogMutated=false，rollbackPackageMutated=false。

Dual JSON 纠错事件纠错事务 MCP Queue MCP Document Citation Lookup 回滚包 BBS 双签范式

4双签 schema

4可校验

4同人禁止

4Approval 禁写

4approvalDigest

0实际写入

Dual Control Approval

发起人与复核人门禁

当前展示单资产/小范围双签详情。

双人确认 dry-run 可校验

元数据纠错 / 香港 Office Harbor Tower

AI / AI 回答脚注 / 批准发布 dry-run

Dual JSON

asset_visual_local_source_surface_release_audit_correction_approvalsinitiator=qareviewer=opssamePersonForbidden=truesecondConfirmRequired=true

approvalDigestba9ccca92f49...300c5d

correctionDigest45a5c78a40a0...d15332

rollbackDigest61b34d559299...4efaf1

dualControlDryRun=truedualControlWriteDisabled=trueapprovalWritten=falsecorrectionEventWritten=falseauditLogMutated=falserollbackPackageMutated=falsesessionCreated=falsemcpIndexWritten=falsetradingUseDisabled=true

Role Matrixops: initiate=true / review=true / 负责发起源图消费面纠错、核对回滚包和运营变更单，但不能绕过双人确认。qa: initiate=true / review=true / 负责 digest、source markers、consumer surface 与只读展示一致性复核。editor: initiate=true / review=true / 负责官网、BBS、AI 脚注和公开文案 redaction 口径复核。compliance: initiate=false / review=false / 负责 redaction、策略阻断、非投资建议和 no-trading 红线。admin: initiate=true / review=true / 可以填任一槽位，但不能绕过同人禁止、原审计不可变、原回滚包不可变和写入禁用。

{
  "table": "asset_visual_local_source_surface_release_audit_correction_approvals",
  "schemaVersion": "2026-07-local-source-surface-release-audit-correction-dual-control-v1",
  "approvalId": "asset-visual-local-source-surface-release-audit-correction-dual-control-hk-office-harbor-tower-ai-assistant-approve-surface-release-dry-run",
  "approvalType": "local-source-surface-release-audit-correction-dual-control",
  "correctionEventId": "asset-visual-local-source-surface-release-audit-correction-hk-office-harbor-tower-ai-assistant-approve-surface-release-dry-run",
  "correctionDigest": "45a5c78a40a0f1e756b81bf59ba2fc0c006e28ce24905e73bd3e95c6cbd15332",
  "targetAuditLogId": "asset-visual-local-source-surface-release-action-audit-hk-office-harbor-tower-ai-assistant-approve-surface-release-dry-run",
  "targetAuditDigest": "8be773bbd28af18af2969e90f8efc14e50d43c4657dd617dfa8259a6cc945066",
  "targetRollbackPackageId": "asset-visual-local-source-surface-release-rollback-hk-office-harbor-tower-ai-assistant-approve-surface-release-dry-run",
  "targetRollbackDigest": "61b34d559299c5e2c22a53ab9c0df110c566829fe42bf9e40c394d924e4efaf1",
  "actionDigest": "d5d65501538d282f5b06df50f43d46978232f4386a5565cff7386cd7ef354ef6",
  "releaseDigest": "0e7dadb2644965364c9e82e1df5ed8109fc9ffbfe66df990c33a5eb944ec8252",
  "sourceManifestDigest": "1f9aa803dea35cdb96429a71efd5907cbd78856d3b666d3bb8e46be7bae419bf",
  "correctionType": "metadata-correction",
  "consumer": "ai-assistant",
  "surface": "ai-answer",
  "initiatorRole": "qa",
  "reviewerRole": "ops",
  "secondConfirmRequired": true,
  "samePersonForbidden": true,
  "originalAuditImmutable": true,
  "originalRollbackImmutable": true,
  "createdAt": "2026-07-31T18:33:40.903Z",
  "writeMode": "dry-run-only"
}

{
  "initiatorSlot": "local-source-correction-initiator",
  "reviewerSlot": "local-source-correction-reviewer",
  "futureIdentityProvider": "future:ops-sso + local-source-surface-release-actor-snapshot",
  "sessionStorage": "future:httpOnly-session + immutable correction approval snapshot",
  "proofRequiredBeforeWrite": true,
  "approvalWriteDisabled": true,
  "correctionWriteDisabled": true,
  "preserveAuditDigest": true,
  "preserveRollbackDigest": true,
  "noPublicSideEffect": true
}

双签详情 Tx Fix Fix Queue Fix Document 纠错事件回滚包资产详情

双人确认 dry-run 可校验

元数据纠错 / 香港 Office Harbor Tower

AI / AI 回答脚注 / 请求文案修复

Dual JSON

asset_visual_local_source_surface_release_audit_correction_approvalsinitiator=qareviewer=opssamePersonForbidden=truesecondConfirmRequired=true

approvalDigest4cd1d4b156f1...62d9fd

correctionDigest038f4e4b8e28...2b92d8

rollbackDigest842f2dde2ba3...c28951

{
  "table": "asset_visual_local_source_surface_release_audit_correction_approvals",
  "schemaVersion": "2026-07-local-source-surface-release-audit-correction-dual-control-v1",
  "approvalId": "asset-visual-local-source-surface-release-audit-correction-dual-control-hk-office-harbor-tower-ai-assistant-request-surface-copy-fix",
  "approvalType": "local-source-surface-release-audit-correction-dual-control",
  "correctionEventId": "asset-visual-local-source-surface-release-audit-correction-hk-office-harbor-tower-ai-assistant-request-surface-copy-fix",
  "correctionDigest": "038f4e4b8e28e51334d771046a531e1267d89522f423239e2f53d27e752b92d8",
  "targetAuditLogId": "asset-visual-local-source-surface-release-action-audit-hk-office-harbor-tower-ai-assistant-request-surface-copy-fix",
  "targetAuditDigest": "ad07629bbb2e15c07055fd632438b49407d2b842fca9ef55e32d0f2c24ec9ac4",
  "targetRollbackPackageId": "asset-visual-local-source-surface-release-rollback-hk-office-harbor-tower-ai-assistant-request-surface-copy-fix",
  "targetRollbackDigest": "842f2dde2ba3d6aebab43289826f27bf4ac31299dc70f68aa5aa191541c28951",
  "actionDigest": "677341057d2119b306d7a120fb81c65ead35f0b9cfeec0c116c34c53349036d7",
  "releaseDigest": "0e7dadb2644965364c9e82e1df5ed8109fc9ffbfe66df990c33a5eb944ec8252",
  "sourceManifestDigest": "1f9aa803dea35cdb96429a71efd5907cbd78856d3b666d3bb8e46be7bae419bf",
  "correctionType": "metadata-correction",
  "consumer": "ai-assistant",
  "surface": "ai-answer",
  "initiatorRole": "qa",
  "reviewerRole": "ops",
  "secondConfirmRequired": true,
  "samePersonForbidden": true,
  "originalAuditImmutable": true,
  "originalRollbackImmutable": true,
  "createdAt": "2026-07-31T18:33:40.903Z",
  "writeMode": "dry-run-only"
}

{
  "initiatorSlot": "local-source-correction-initiator",
  "reviewerSlot": "local-source-correction-reviewer",
  "futureIdentityProvider": "future:ops-sso + local-source-surface-release-actor-snapshot",
  "sessionStorage": "future:httpOnly-session + immutable correction approval snapshot",
  "proofRequiredBeforeWrite": true,
  "approvalWriteDisabled": true,
  "correctionWriteDisabled": true,
  "preserveAuditDigest": true,
  "preserveRollbackDigest": true,
  "noPublicSideEffect": true
}

双签详情 Tx Fix Fix Queue Fix Document 纠错事件回滚包资产详情

双人确认 dry-run 可校验

策略说明 / 香港 Office Harbor Tower

AI / AI 回答脚注 / 请求风控复核

Dual JSON

asset_visual_local_source_surface_release_audit_correction_approvalsinitiator=opsreviewer=compliancesamePersonForbidden=truesecondConfirmRequired=true

approvalDigest868905faaf40...da7942

correctionDigestd31f2932a9cb...140f49

rollbackDigest487137abcab2...ea0cd7

Role Matrixops: initiate=true / review=true / 负责发起源图消费面纠错、核对回滚包和运营变更单，但不能绕过双人确认。qa: initiate=false / review=false / 负责 digest、source markers、consumer surface 与只读展示一致性复核。editor: initiate=false / review=false / 负责官网、BBS、AI 脚注和公开文案 redaction 口径复核。compliance: initiate=true / review=true / 负责 redaction、策略阻断、非投资建议和 no-trading 红线。admin: initiate=true / review=true / 可以填任一槽位，但不能绕过同人禁止、原审计不可变、原回滚包不可变和写入禁用。

{
  "table": "asset_visual_local_source_surface_release_audit_correction_approvals",
  "schemaVersion": "2026-07-local-source-surface-release-audit-correction-dual-control-v1",
  "approvalId": "asset-visual-local-source-surface-release-audit-correction-dual-control-hk-office-harbor-tower-ai-assistant-request-risk-review",
  "approvalType": "local-source-surface-release-audit-correction-dual-control",
  "correctionEventId": "asset-visual-local-source-surface-release-audit-correction-hk-office-harbor-tower-ai-assistant-request-risk-review",
  "correctionDigest": "d31f2932a9cb4b1443284d38a4a0046fab9dd085dd47c2d06f682acc41140f49",
  "targetAuditLogId": "asset-visual-local-source-surface-release-action-audit-hk-office-harbor-tower-ai-assistant-request-risk-review",
  "targetAuditDigest": "382ee3eba9985c634f8599d64937684092bac008e7181d1abb682c84b78eb73e",
  "targetRollbackPackageId": "asset-visual-local-source-surface-release-rollback-hk-office-harbor-tower-ai-assistant-request-risk-review",
  "targetRollbackDigest": "487137abcab23cc7ec210c17948e07f417498db1c170fcca29a2a4542fea0cd7",
  "actionDigest": "b65a199868622a2857ffa999e15f7c2ce161748866f2de1298b904e8cf2f1707",
  "releaseDigest": "0e7dadb2644965364c9e82e1df5ed8109fc9ffbfe66df990c33a5eb944ec8252",
  "sourceManifestDigest": "1f9aa803dea35cdb96429a71efd5907cbd78856d3b666d3bb8e46be7bae419bf",
  "correctionType": "policy-blocker-note",
  "consumer": "ai-assistant",
  "surface": "ai-answer",
  "initiatorRole": "ops",
  "reviewerRole": "compliance",
  "secondConfirmRequired": true,
  "samePersonForbidden": true,
  "originalAuditImmutable": true,
  "originalRollbackImmutable": true,
  "createdAt": "2026-07-31T18:33:40.903Z",
  "writeMode": "dry-run-only"
}

{
  "initiatorSlot": "local-source-correction-initiator",
  "reviewerSlot": "local-source-correction-reviewer",
  "futureIdentityProvider": "future:ops-sso + local-source-surface-release-actor-snapshot",
  "sessionStorage": "future:httpOnly-session + immutable correction approval snapshot",
  "proofRequiredBeforeWrite": true,
  "approvalWriteDisabled": true,
  "correctionWriteDisabled": true,
  "preserveAuditDigest": true,
  "preserveRollbackDigest": true,
  "noPublicSideEffect": true
}

双签详情 Tx Fix Fix Queue Fix Document 纠错事件回滚包资产详情

双人确认 dry-run 可校验

Redaction 请求 / 香港 Office Harbor Tower

AI / AI 回答脚注 / 拒绝发布

Dual JSON

asset_visual_local_source_surface_release_audit_correction_approvalsinitiator=compliancereviewer=editorsamePersonForbidden=truesecondConfirmRequired=true

approvalDigest9273780a2b27...4dfb2b

correctionDigest73914c33ef1c...e19495

rollbackDigest5f024618a39a...67d99e

Role Matrixops: initiate=true / review=false / 负责发起源图消费面纠错、核对回滚包和运营变更单，但不能绕过双人确认。qa: initiate=true / review=false / 负责 digest、source markers、consumer surface 与只读展示一致性复核。editor: initiate=true / review=true / 负责官网、BBS、AI 脚注和公开文案 redaction 口径复核。compliance: initiate=true / review=true / 负责 redaction、策略阻断、非投资建议和 no-trading 红线。admin: initiate=true / review=true / 可以填任一槽位，但不能绕过同人禁止、原审计不可变、原回滚包不可变和写入禁用。

{
  "table": "asset_visual_local_source_surface_release_audit_correction_approvals",
  "schemaVersion": "2026-07-local-source-surface-release-audit-correction-dual-control-v1",
  "approvalId": "asset-visual-local-source-surface-release-audit-correction-dual-control-hk-office-harbor-tower-ai-assistant-reject-surface-release",
  "approvalType": "local-source-surface-release-audit-correction-dual-control",
  "correctionEventId": "asset-visual-local-source-surface-release-audit-correction-hk-office-harbor-tower-ai-assistant-reject-surface-release",
  "correctionDigest": "73914c33ef1c61fd2ca207fe119313a140ff3e47d64f070bf428ccff6be19495",
  "targetAuditLogId": "asset-visual-local-source-surface-release-action-audit-hk-office-harbor-tower-ai-assistant-reject-surface-release",
  "targetAuditDigest": "988824be11434bcaf13156005771c87e0a5bfa064722a0ac273938586dca7f70",
  "targetRollbackPackageId": "asset-visual-local-source-surface-release-rollback-hk-office-harbor-tower-ai-assistant-reject-surface-release",
  "targetRollbackDigest": "5f024618a39a860f724f9333d978183010b4fc261407fd39ec831d54cd67d99e",
  "actionDigest": "a760a8ce0b70cd4f0acf74ee4f7071908c2965a5d0dc622923c7b8e3ac588a4e",
  "releaseDigest": "0e7dadb2644965364c9e82e1df5ed8109fc9ffbfe66df990c33a5eb944ec8252",
  "sourceManifestDigest": "1f9aa803dea35cdb96429a71efd5907cbd78856d3b666d3bb8e46be7bae419bf",
  "correctionType": "redaction-request",
  "consumer": "ai-assistant",
  "surface": "ai-answer",
  "initiatorRole": "compliance",
  "reviewerRole": "editor",
  "secondConfirmRequired": true,
  "samePersonForbidden": true,
  "originalAuditImmutable": true,
  "originalRollbackImmutable": true,
  "createdAt": "2026-07-31T18:33:40.903Z",
  "writeMode": "dry-run-only"
}

{
  "initiatorSlot": "local-source-correction-initiator",
  "reviewerSlot": "local-source-correction-reviewer",
  "futureIdentityProvider": "future:ops-sso + local-source-surface-release-actor-snapshot",
  "sessionStorage": "future:httpOnly-session + immutable correction approval snapshot",
  "proofRequiredBeforeWrite": true,
  "approvalWriteDisabled": true,
  "correctionWriteDisabled": true,
  "preserveAuditDigest": true,
  "preserveRollbackDigest": true,
  "noPublicSideEffect": true
}