Architecture Cut 72 / Local Source Correction Dual Control

源图审计纠错双人确认 Dry-run

为源图发布审计 correction 事件生成双人确认 schema、角色矩阵、同人禁止和 approvalDigest。当前只读预演：approvalWritten=false，correctionEventWritten=false，auditLogMutated=false，rollbackPackageMutated=false。

Dual JSON 纠错事件纠错事务 MCP Queue MCP Document Citation Lookup 回滚包 BBS 双签范式

4双签 schema

4可校验

4同人禁止

4Approval 禁写

4approvalDigest

0实际写入

Dual Control Approval

发起人与复核人门禁

当前展示单资产/小范围双签详情。

双人确认 dry-run 可校验

元数据纠错 / 美国数据中心 Grid Node

AI / AI 回答脚注 / 批准发布 dry-run

Dual JSON

asset_visual_local_source_surface_release_audit_correction_approvalsinitiator=qareviewer=opssamePersonForbidden=truesecondConfirmRequired=true

approvalDigest9b69edd90f84...bef83e

correctionDigest3404a87f6105...2b7095

rollbackDigest0b9157821f65...97130a

dualControlDryRun=truedualControlWriteDisabled=trueapprovalWritten=falsecorrectionEventWritten=falseauditLogMutated=falserollbackPackageMutated=falsesessionCreated=falsemcpIndexWritten=falsetradingUseDisabled=true

Role Matrixops: initiate=true / review=true / 负责发起源图消费面纠错、核对回滚包和运营变更单，但不能绕过双人确认。qa: initiate=true / review=true / 负责 digest、source markers、consumer surface 与只读展示一致性复核。editor: initiate=true / review=true / 负责官网、BBS、AI 脚注和公开文案 redaction 口径复核。compliance: initiate=false / review=false / 负责 redaction、策略阻断、非投资建议和 no-trading 红线。admin: initiate=true / review=true / 可以填任一槽位，但不能绕过同人禁止、原审计不可变、原回滚包不可变和写入禁用。

{
  "table": "asset_visual_local_source_surface_release_audit_correction_approvals",
  "schemaVersion": "2026-07-local-source-surface-release-audit-correction-dual-control-v1",
  "approvalId": "asset-visual-local-source-surface-release-audit-correction-dual-control-us-data-center-grid-node-ai-assistant-approve-surface-release-dry-run",
  "approvalType": "local-source-surface-release-audit-correction-dual-control",
  "correctionEventId": "asset-visual-local-source-surface-release-audit-correction-us-data-center-grid-node-ai-assistant-approve-surface-release-dry-run",
  "correctionDigest": "3404a87f6105bb07fe3fc4716024e092954b33e47e9cbf9de1bff6d2dc2b7095",
  "targetAuditLogId": "asset-visual-local-source-surface-release-action-audit-us-data-center-grid-node-ai-assistant-approve-surface-release-dry-run",
  "targetAuditDigest": "83c10217da313de86f5ea244931aa803dd6e8122dfaf33a03fc382053bc1dc8e",
  "targetRollbackPackageId": "asset-visual-local-source-surface-release-rollback-us-data-center-grid-node-ai-assistant-approve-surface-release-dry-run",
  "targetRollbackDigest": "0b9157821f651756b6ccef7d0422472072e9bea70ac34ab7cf8d6afe1897130a",
  "actionDigest": "6d3e53ea2a1e9a3aac5e1c628c943364a9454913c06116a3a209a4fa80aa608b",
  "releaseDigest": "510337d5ae699d1a55ea0d866216a5a37bdd60dcce95a8143789739acab0d23f",
  "sourceManifestDigest": "bf991e64d79f2ccfe624cd3e1015aa7c51006d034fe6f0b0bb67151840235036",
  "correctionType": "metadata-correction",
  "consumer": "ai-assistant",
  "surface": "ai-answer",
  "initiatorRole": "qa",
  "reviewerRole": "ops",
  "secondConfirmRequired": true,
  "samePersonForbidden": true,
  "originalAuditImmutable": true,
  "originalRollbackImmutable": true,
  "createdAt": "2026-07-31T18:33:40.903Z",
  "writeMode": "dry-run-only"
}

{
  "initiatorSlot": "local-source-correction-initiator",
  "reviewerSlot": "local-source-correction-reviewer",
  "futureIdentityProvider": "future:ops-sso + local-source-surface-release-actor-snapshot",
  "sessionStorage": "future:httpOnly-session + immutable correction approval snapshot",
  "proofRequiredBeforeWrite": true,
  "approvalWriteDisabled": true,
  "correctionWriteDisabled": true,
  "preserveAuditDigest": true,
  "preserveRollbackDigest": true,
  "noPublicSideEffect": true
}

双签详情 Tx Fix Fix Queue Fix Document 纠错事件回滚包资产详情

双人确认 dry-run 可校验

元数据纠错 / 美国数据中心 Grid Node

AI / AI 回答脚注 / 请求文案修复

Dual JSON

asset_visual_local_source_surface_release_audit_correction_approvalsinitiator=qareviewer=opssamePersonForbidden=truesecondConfirmRequired=true

approvalDigest0d65108c2e46...7147cf

correctionDigest7aa7c06146d8...c7dee7

rollbackDigesteae946a51af2...252a55

{
  "table": "asset_visual_local_source_surface_release_audit_correction_approvals",
  "schemaVersion": "2026-07-local-source-surface-release-audit-correction-dual-control-v1",
  "approvalId": "asset-visual-local-source-surface-release-audit-correction-dual-control-us-data-center-grid-node-ai-assistant-request-surface-copy-fix",
  "approvalType": "local-source-surface-release-audit-correction-dual-control",
  "correctionEventId": "asset-visual-local-source-surface-release-audit-correction-us-data-center-grid-node-ai-assistant-request-surface-copy-fix",
  "correctionDigest": "7aa7c06146d80bcf737124231bc274af840dddbc4e424ecf3b6aeca9f9c7dee7",
  "targetAuditLogId": "asset-visual-local-source-surface-release-action-audit-us-data-center-grid-node-ai-assistant-request-surface-copy-fix",
  "targetAuditDigest": "a7a32557eb9284b65f0d8a71d5013bef4324268ec289d444da01105decacb186",
  "targetRollbackPackageId": "asset-visual-local-source-surface-release-rollback-us-data-center-grid-node-ai-assistant-request-surface-copy-fix",
  "targetRollbackDigest": "eae946a51af22826ddfd1d2c692883e2f6fc4b4bb560200babffad6cd4252a55",
  "actionDigest": "ea592a073af3327bca9ab1c0e85ca08afa0fa4aed57a92e2d6052ec6f901f7d2",
  "releaseDigest": "510337d5ae699d1a55ea0d866216a5a37bdd60dcce95a8143789739acab0d23f",
  "sourceManifestDigest": "bf991e64d79f2ccfe624cd3e1015aa7c51006d034fe6f0b0bb67151840235036",
  "correctionType": "metadata-correction",
  "consumer": "ai-assistant",
  "surface": "ai-answer",
  "initiatorRole": "qa",
  "reviewerRole": "ops",
  "secondConfirmRequired": true,
  "samePersonForbidden": true,
  "originalAuditImmutable": true,
  "originalRollbackImmutable": true,
  "createdAt": "2026-07-31T18:33:40.903Z",
  "writeMode": "dry-run-only"
}

{
  "initiatorSlot": "local-source-correction-initiator",
  "reviewerSlot": "local-source-correction-reviewer",
  "futureIdentityProvider": "future:ops-sso + local-source-surface-release-actor-snapshot",
  "sessionStorage": "future:httpOnly-session + immutable correction approval snapshot",
  "proofRequiredBeforeWrite": true,
  "approvalWriteDisabled": true,
  "correctionWriteDisabled": true,
  "preserveAuditDigest": true,
  "preserveRollbackDigest": true,
  "noPublicSideEffect": true
}

双签详情 Tx Fix Fix Queue Fix Document 纠错事件回滚包资产详情

双人确认 dry-run 可校验

策略说明 / 美国数据中心 Grid Node

AI / AI 回答脚注 / 请求风控复核

Dual JSON

asset_visual_local_source_surface_release_audit_correction_approvalsinitiator=opsreviewer=compliancesamePersonForbidden=truesecondConfirmRequired=true

approvalDigestc92855733c71...e9d106

correctionDigesta66694634f25...53abfa

rollbackDigest1fd794e53011...0b9218

Role Matrixops: initiate=true / review=true / 负责发起源图消费面纠错、核对回滚包和运营变更单，但不能绕过双人确认。qa: initiate=false / review=false / 负责 digest、source markers、consumer surface 与只读展示一致性复核。editor: initiate=false / review=false / 负责官网、BBS、AI 脚注和公开文案 redaction 口径复核。compliance: initiate=true / review=true / 负责 redaction、策略阻断、非投资建议和 no-trading 红线。admin: initiate=true / review=true / 可以填任一槽位，但不能绕过同人禁止、原审计不可变、原回滚包不可变和写入禁用。

{
  "table": "asset_visual_local_source_surface_release_audit_correction_approvals",
  "schemaVersion": "2026-07-local-source-surface-release-audit-correction-dual-control-v1",
  "approvalId": "asset-visual-local-source-surface-release-audit-correction-dual-control-us-data-center-grid-node-ai-assistant-request-risk-review",
  "approvalType": "local-source-surface-release-audit-correction-dual-control",
  "correctionEventId": "asset-visual-local-source-surface-release-audit-correction-us-data-center-grid-node-ai-assistant-request-risk-review",
  "correctionDigest": "a66694634f2563d2c2783f908ad2a8549bdd62a1739a4bdb0ccc6b398853abfa",
  "targetAuditLogId": "asset-visual-local-source-surface-release-action-audit-us-data-center-grid-node-ai-assistant-request-risk-review",
  "targetAuditDigest": "539106b571a6c1d297890d2f8bd4431616cf608e15908ed54588f6e798173ba7",
  "targetRollbackPackageId": "asset-visual-local-source-surface-release-rollback-us-data-center-grid-node-ai-assistant-request-risk-review",
  "targetRollbackDigest": "1fd794e5301193c4cab6812b66a09165fa5e1204f35db3f827ce7b29010b9218",
  "actionDigest": "f22b2fad03f1ac8ef2e89d23af93cf1f2f1e39c00b91173e33038b8c0ccaa19b",
  "releaseDigest": "510337d5ae699d1a55ea0d866216a5a37bdd60dcce95a8143789739acab0d23f",
  "sourceManifestDigest": "bf991e64d79f2ccfe624cd3e1015aa7c51006d034fe6f0b0bb67151840235036",
  "correctionType": "policy-blocker-note",
  "consumer": "ai-assistant",
  "surface": "ai-answer",
  "initiatorRole": "ops",
  "reviewerRole": "compliance",
  "secondConfirmRequired": true,
  "samePersonForbidden": true,
  "originalAuditImmutable": true,
  "originalRollbackImmutable": true,
  "createdAt": "2026-07-31T18:33:40.903Z",
  "writeMode": "dry-run-only"
}

{
  "initiatorSlot": "local-source-correction-initiator",
  "reviewerSlot": "local-source-correction-reviewer",
  "futureIdentityProvider": "future:ops-sso + local-source-surface-release-actor-snapshot",
  "sessionStorage": "future:httpOnly-session + immutable correction approval snapshot",
  "proofRequiredBeforeWrite": true,
  "approvalWriteDisabled": true,
  "correctionWriteDisabled": true,
  "preserveAuditDigest": true,
  "preserveRollbackDigest": true,
  "noPublicSideEffect": true
}

双签详情 Tx Fix Fix Queue Fix Document 纠错事件回滚包资产详情

双人确认 dry-run 可校验

Redaction 请求 / 美国数据中心 Grid Node

AI / AI 回答脚注 / 拒绝发布

Dual JSON

asset_visual_local_source_surface_release_audit_correction_approvalsinitiator=compliancereviewer=editorsamePersonForbidden=truesecondConfirmRequired=true

approvalDigest0d313e60d61f...eb4d4b

correctionDigestf1ac626986d8...52ff41

rollbackDigestba96fd96fc45...b5ebb4

Role Matrixops: initiate=true / review=false / 负责发起源图消费面纠错、核对回滚包和运营变更单，但不能绕过双人确认。qa: initiate=true / review=false / 负责 digest、source markers、consumer surface 与只读展示一致性复核。editor: initiate=true / review=true / 负责官网、BBS、AI 脚注和公开文案 redaction 口径复核。compliance: initiate=true / review=true / 负责 redaction、策略阻断、非投资建议和 no-trading 红线。admin: initiate=true / review=true / 可以填任一槽位，但不能绕过同人禁止、原审计不可变、原回滚包不可变和写入禁用。

{
  "table": "asset_visual_local_source_surface_release_audit_correction_approvals",
  "schemaVersion": "2026-07-local-source-surface-release-audit-correction-dual-control-v1",
  "approvalId": "asset-visual-local-source-surface-release-audit-correction-dual-control-us-data-center-grid-node-ai-assistant-reject-surface-release",
  "approvalType": "local-source-surface-release-audit-correction-dual-control",
  "correctionEventId": "asset-visual-local-source-surface-release-audit-correction-us-data-center-grid-node-ai-assistant-reject-surface-release",
  "correctionDigest": "f1ac626986d863919d9fcc785517d0acd662adc31c0023f59d726a471c52ff41",
  "targetAuditLogId": "asset-visual-local-source-surface-release-action-audit-us-data-center-grid-node-ai-assistant-reject-surface-release",
  "targetAuditDigest": "6dbe3b12c59934754aa31d1ef21c4400dddd38119b4fa67eae86cd64cfe9c2d8",
  "targetRollbackPackageId": "asset-visual-local-source-surface-release-rollback-us-data-center-grid-node-ai-assistant-reject-surface-release",
  "targetRollbackDigest": "ba96fd96fc4560c4da22caa8b21601f716e2b410ad8ff69b1b059785a9b5ebb4",
  "actionDigest": "c7d431fd9ebc1e20e52b6ffbaebae05b1ddd7fbf2c06cc19616a179adade425e",
  "releaseDigest": "510337d5ae699d1a55ea0d866216a5a37bdd60dcce95a8143789739acab0d23f",
  "sourceManifestDigest": "bf991e64d79f2ccfe624cd3e1015aa7c51006d034fe6f0b0bb67151840235036",
  "correctionType": "redaction-request",
  "consumer": "ai-assistant",
  "surface": "ai-answer",
  "initiatorRole": "compliance",
  "reviewerRole": "editor",
  "secondConfirmRequired": true,
  "samePersonForbidden": true,
  "originalAuditImmutable": true,
  "originalRollbackImmutable": true,
  "createdAt": "2026-07-31T18:33:40.903Z",
  "writeMode": "dry-run-only"
}

{
  "initiatorSlot": "local-source-correction-initiator",
  "reviewerSlot": "local-source-correction-reviewer",
  "futureIdentityProvider": "future:ops-sso + local-source-surface-release-actor-snapshot",
  "sessionStorage": "future:httpOnly-session + immutable correction approval snapshot",
  "proofRequiredBeforeWrite": true,
  "approvalWriteDisabled": true,
  "correctionWriteDisabled": true,
  "preserveAuditDigest": true,
  "preserveRollbackDigest": true,
  "noPublicSideEffect": true
}