Architecture Cut 72 / Local Source Correction Dual Control

源图审计纠错双人确认 Dry-run

为源图发布审计 correction 事件生成双人确认 schema、角色矩阵、同人禁止和 approvalDigest。当前只读预演：approvalWritten=false，correctionEventWritten=false，auditLogMutated=false，rollbackPackageMutated=false。

Dual JSON 纠错事件纠错事务 MCP Queue MCP Document Citation Lookup 回滚包 BBS 双签范式

4双签 schema

4可校验

4同人禁止

4Approval 禁写

4approvalDigest

0实际写入

Dual Control Approval

发起人与复核人门禁

当前展示单资产/小范围双签详情。

双人确认 dry-run 可校验

元数据纠错 / 香港 Office Harbor Tower

运营台 / 运营台人审 / 批准发布 dry-run

Dual JSON

asset_visual_local_source_surface_release_audit_correction_approvalsinitiator=qareviewer=opssamePersonForbidden=truesecondConfirmRequired=true

approvalDigest169e71ad1d7f...e917f1

correctionDigest109c9e9a73d5...77c1a7

rollbackDigest644b5737afeb...ef8b59

dualControlDryRun=truedualControlWriteDisabled=trueapprovalWritten=falsecorrectionEventWritten=falseauditLogMutated=falserollbackPackageMutated=falsesessionCreated=falsemcpIndexWritten=falsetradingUseDisabled=true

Role Matrixops: initiate=true / review=true / 负责发起源图消费面纠错、核对回滚包和运营变更单，但不能绕过双人确认。qa: initiate=true / review=true / 负责 digest、source markers、consumer surface 与只读展示一致性复核。editor: initiate=true / review=true / 负责官网、BBS、AI 脚注和公开文案 redaction 口径复核。compliance: initiate=false / review=false / 负责 redaction、策略阻断、非投资建议和 no-trading 红线。admin: initiate=true / review=true / 可以填任一槽位，但不能绕过同人禁止、原审计不可变、原回滚包不可变和写入禁用。

{
  "table": "asset_visual_local_source_surface_release_audit_correction_approvals",
  "schemaVersion": "2026-07-local-source-surface-release-audit-correction-dual-control-v1",
  "approvalId": "asset-visual-local-source-surface-release-audit-correction-dual-control-hk-office-harbor-tower-ops-console-approve-surface-release-dry-run",
  "approvalType": "local-source-surface-release-audit-correction-dual-control",
  "correctionEventId": "asset-visual-local-source-surface-release-audit-correction-hk-office-harbor-tower-ops-console-approve-surface-release-dry-run",
  "correctionDigest": "109c9e9a73d5b8370b40da54a52e1adab64fe37bcad7482662eb77c38577c1a7",
  "targetAuditLogId": "asset-visual-local-source-surface-release-action-audit-hk-office-harbor-tower-ops-console-approve-surface-release-dry-run",
  "targetAuditDigest": "06e1d892d78d341ee5a3d2ce1df200f2162e65dd4766a99aa2fd94c5cf3022ed",
  "targetRollbackPackageId": "asset-visual-local-source-surface-release-rollback-hk-office-harbor-tower-ops-console-approve-surface-release-dry-run",
  "targetRollbackDigest": "644b5737afebd84779dfc5f02437682459a54113f0b886c6494e0c2835ef8b59",
  "actionDigest": "acdbe0c942e289085b99f5668ecb20ceb1096c7a6422628618b47d068bf86329",
  "releaseDigest": "db7ea4ada2ecf3a7290ee4cc93cff3bfb8fcf06f5efe1fd23dc9f6c6722da2b0",
  "sourceManifestDigest": "1f9aa803dea35cdb96429a71efd5907cbd78856d3b666d3bb8e46be7bae419bf",
  "correctionType": "metadata-correction",
  "consumer": "ops-console",
  "surface": "ops-console",
  "initiatorRole": "qa",
  "reviewerRole": "ops",
  "secondConfirmRequired": true,
  "samePersonForbidden": true,
  "originalAuditImmutable": true,
  "originalRollbackImmutable": true,
  "createdAt": "2026-07-31T18:33:40.903Z",
  "writeMode": "dry-run-only"
}

{
  "initiatorSlot": "local-source-correction-initiator",
  "reviewerSlot": "local-source-correction-reviewer",
  "futureIdentityProvider": "future:ops-sso + local-source-surface-release-actor-snapshot",
  "sessionStorage": "future:httpOnly-session + immutable correction approval snapshot",
  "proofRequiredBeforeWrite": true,
  "approvalWriteDisabled": true,
  "correctionWriteDisabled": true,
  "preserveAuditDigest": true,
  "preserveRollbackDigest": true,
  "noPublicSideEffect": true
}

双签详情 Tx Fix Fix Queue Fix Document 纠错事件回滚包资产详情

双人确认 dry-run 可校验

元数据纠错 / 香港 Office Harbor Tower

运营台 / 运营台人审 / 请求文案修复

Dual JSON

asset_visual_local_source_surface_release_audit_correction_approvalsinitiator=qareviewer=opssamePersonForbidden=truesecondConfirmRequired=true

approvalDigest0cfac402d81a...8798b6

correctionDigest37947b603042...18bbb1

rollbackDigestf5c1be9d4cd8...b3b6e1

{
  "table": "asset_visual_local_source_surface_release_audit_correction_approvals",
  "schemaVersion": "2026-07-local-source-surface-release-audit-correction-dual-control-v1",
  "approvalId": "asset-visual-local-source-surface-release-audit-correction-dual-control-hk-office-harbor-tower-ops-console-request-surface-copy-fix",
  "approvalType": "local-source-surface-release-audit-correction-dual-control",
  "correctionEventId": "asset-visual-local-source-surface-release-audit-correction-hk-office-harbor-tower-ops-console-request-surface-copy-fix",
  "correctionDigest": "37947b60304206e362477b5e3bdd3bec1a86cffaa50e1f6445006562bc18bbb1",
  "targetAuditLogId": "asset-visual-local-source-surface-release-action-audit-hk-office-harbor-tower-ops-console-request-surface-copy-fix",
  "targetAuditDigest": "36790365902892cbf6b40af6faa4b9af8b08ba04a6f7f42afdc4dede4075f9f9",
  "targetRollbackPackageId": "asset-visual-local-source-surface-release-rollback-hk-office-harbor-tower-ops-console-request-surface-copy-fix",
  "targetRollbackDigest": "f5c1be9d4cd865a8bd9523062695db4a0a894db5f0409d473ab8c70b4ab3b6e1",
  "actionDigest": "28658a50f68e8e08b0c3601a7cb240ee3a5bc55872ec8140348648fc3300d17f",
  "releaseDigest": "db7ea4ada2ecf3a7290ee4cc93cff3bfb8fcf06f5efe1fd23dc9f6c6722da2b0",
  "sourceManifestDigest": "1f9aa803dea35cdb96429a71efd5907cbd78856d3b666d3bb8e46be7bae419bf",
  "correctionType": "metadata-correction",
  "consumer": "ops-console",
  "surface": "ops-console",
  "initiatorRole": "qa",
  "reviewerRole": "ops",
  "secondConfirmRequired": true,
  "samePersonForbidden": true,
  "originalAuditImmutable": true,
  "originalRollbackImmutable": true,
  "createdAt": "2026-07-31T18:33:40.903Z",
  "writeMode": "dry-run-only"
}

{
  "initiatorSlot": "local-source-correction-initiator",
  "reviewerSlot": "local-source-correction-reviewer",
  "futureIdentityProvider": "future:ops-sso + local-source-surface-release-actor-snapshot",
  "sessionStorage": "future:httpOnly-session + immutable correction approval snapshot",
  "proofRequiredBeforeWrite": true,
  "approvalWriteDisabled": true,
  "correctionWriteDisabled": true,
  "preserveAuditDigest": true,
  "preserveRollbackDigest": true,
  "noPublicSideEffect": true
}

双签详情 Tx Fix Fix Queue Fix Document 纠错事件回滚包资产详情

双人确认 dry-run 可校验

策略说明 / 香港 Office Harbor Tower

运营台 / 运营台人审 / 请求风控复核

Dual JSON

asset_visual_local_source_surface_release_audit_correction_approvalsinitiator=opsreviewer=compliancesamePersonForbidden=truesecondConfirmRequired=true

approvalDigest679322f4c2f2...bb06c8

correctionDigestf763d6d6ebf3...479569

rollbackDigest399de224fa7d...cfa811

Role Matrixops: initiate=true / review=true / 负责发起源图消费面纠错、核对回滚包和运营变更单，但不能绕过双人确认。qa: initiate=false / review=false / 负责 digest、source markers、consumer surface 与只读展示一致性复核。editor: initiate=false / review=false / 负责官网、BBS、AI 脚注和公开文案 redaction 口径复核。compliance: initiate=true / review=true / 负责 redaction、策略阻断、非投资建议和 no-trading 红线。admin: initiate=true / review=true / 可以填任一槽位，但不能绕过同人禁止、原审计不可变、原回滚包不可变和写入禁用。

{
  "table": "asset_visual_local_source_surface_release_audit_correction_approvals",
  "schemaVersion": "2026-07-local-source-surface-release-audit-correction-dual-control-v1",
  "approvalId": "asset-visual-local-source-surface-release-audit-correction-dual-control-hk-office-harbor-tower-ops-console-request-risk-review",
  "approvalType": "local-source-surface-release-audit-correction-dual-control",
  "correctionEventId": "asset-visual-local-source-surface-release-audit-correction-hk-office-harbor-tower-ops-console-request-risk-review",
  "correctionDigest": "f763d6d6ebf3ff9cd7a0ca925af293fd5ae862aa18fb429d02bcc5fab7479569",
  "targetAuditLogId": "asset-visual-local-source-surface-release-action-audit-hk-office-harbor-tower-ops-console-request-risk-review",
  "targetAuditDigest": "e1dfaebd6122b47ea6125cc1309b58a4ed5efc9c9b04a5fd9c670bf61dbfbe09",
  "targetRollbackPackageId": "asset-visual-local-source-surface-release-rollback-hk-office-harbor-tower-ops-console-request-risk-review",
  "targetRollbackDigest": "399de224fa7d81955eaa8f94f626cf631facbae1dc04edf2ed41c34a6fcfa811",
  "actionDigest": "c34a8bbc96cff26becb43d741f12ce9fd3d4e411ee358eb05cdfaa6147b07ad7",
  "releaseDigest": "db7ea4ada2ecf3a7290ee4cc93cff3bfb8fcf06f5efe1fd23dc9f6c6722da2b0",
  "sourceManifestDigest": "1f9aa803dea35cdb96429a71efd5907cbd78856d3b666d3bb8e46be7bae419bf",
  "correctionType": "policy-blocker-note",
  "consumer": "ops-console",
  "surface": "ops-console",
  "initiatorRole": "ops",
  "reviewerRole": "compliance",
  "secondConfirmRequired": true,
  "samePersonForbidden": true,
  "originalAuditImmutable": true,
  "originalRollbackImmutable": true,
  "createdAt": "2026-07-31T18:33:40.903Z",
  "writeMode": "dry-run-only"
}

{
  "initiatorSlot": "local-source-correction-initiator",
  "reviewerSlot": "local-source-correction-reviewer",
  "futureIdentityProvider": "future:ops-sso + local-source-surface-release-actor-snapshot",
  "sessionStorage": "future:httpOnly-session + immutable correction approval snapshot",
  "proofRequiredBeforeWrite": true,
  "approvalWriteDisabled": true,
  "correctionWriteDisabled": true,
  "preserveAuditDigest": true,
  "preserveRollbackDigest": true,
  "noPublicSideEffect": true
}

双签详情 Tx Fix Fix Queue Fix Document 纠错事件回滚包资产详情

双人确认 dry-run 可校验

Redaction 请求 / 香港 Office Harbor Tower

运营台 / 运营台人审 / 拒绝发布

Dual JSON

asset_visual_local_source_surface_release_audit_correction_approvalsinitiator=compliancereviewer=compliancesamePersonForbidden=truesecondConfirmRequired=true

approvalDigest2f118f4aa6b2...866b8b

correctionDigestbb93b3cf52e4...586ec9

rollbackDigest01c5e98d752f...2f9bd6

Role Matrixops: initiate=true / review=false / 负责发起源图消费面纠错、核对回滚包和运营变更单，但不能绕过双人确认。qa: initiate=true / review=false / 负责 digest、source markers、consumer surface 与只读展示一致性复核。editor: initiate=true / review=true / 负责官网、BBS、AI 脚注和公开文案 redaction 口径复核。compliance: initiate=true / review=true / 负责 redaction、策略阻断、非投资建议和 no-trading 红线。admin: initiate=true / review=true / 可以填任一槽位，但不能绕过同人禁止、原审计不可变、原回滚包不可变和写入禁用。

{
  "table": "asset_visual_local_source_surface_release_audit_correction_approvals",
  "schemaVersion": "2026-07-local-source-surface-release-audit-correction-dual-control-v1",
  "approvalId": "asset-visual-local-source-surface-release-audit-correction-dual-control-hk-office-harbor-tower-ops-console-reject-surface-release",
  "approvalType": "local-source-surface-release-audit-correction-dual-control",
  "correctionEventId": "asset-visual-local-source-surface-release-audit-correction-hk-office-harbor-tower-ops-console-reject-surface-release",
  "correctionDigest": "bb93b3cf52e40126a79c3a046810157419acaf12326cac708ce6b64801586ec9",
  "targetAuditLogId": "asset-visual-local-source-surface-release-action-audit-hk-office-harbor-tower-ops-console-reject-surface-release",
  "targetAuditDigest": "d525bc8343f5ba585635fd962b27b6bd3d056e07a2936f7c072d40c59c06383f",
  "targetRollbackPackageId": "asset-visual-local-source-surface-release-rollback-hk-office-harbor-tower-ops-console-reject-surface-release",
  "targetRollbackDigest": "01c5e98d752f39e7fffa67ff3e2a54acf634a849780ae32ef22dc542e52f9bd6",
  "actionDigest": "a2e91b51f5d1178b2b1d40f78386b4f6ad2366ee13301becf6b0cfabe1e013aa",
  "releaseDigest": "db7ea4ada2ecf3a7290ee4cc93cff3bfb8fcf06f5efe1fd23dc9f6c6722da2b0",
  "sourceManifestDigest": "1f9aa803dea35cdb96429a71efd5907cbd78856d3b666d3bb8e46be7bae419bf",
  "correctionType": "redaction-request",
  "consumer": "ops-console",
  "surface": "ops-console",
  "initiatorRole": "compliance",
  "reviewerRole": "compliance",
  "secondConfirmRequired": true,
  "samePersonForbidden": true,
  "originalAuditImmutable": true,
  "originalRollbackImmutable": true,
  "createdAt": "2026-07-31T18:33:40.903Z",
  "writeMode": "dry-run-only"
}

{
  "initiatorSlot": "local-source-correction-initiator",
  "reviewerSlot": "local-source-correction-reviewer",
  "futureIdentityProvider": "future:ops-sso + local-source-surface-release-actor-snapshot",
  "sessionStorage": "future:httpOnly-session + immutable correction approval snapshot",
  "proofRequiredBeforeWrite": true,
  "approvalWriteDisabled": true,
  "correctionWriteDisabled": true,
  "preserveAuditDigest": true,
  "preserveRollbackDigest": true,
  "noPublicSideEffect": true
}