Architecture Cut 72 / Local Source Correction Dual Control

源图审计纠错双人确认 Dry-run

为源图发布审计 correction 事件生成双人确认 schema、角色矩阵、同人禁止和 approvalDigest。当前只读预演：approvalWritten=false，correctionEventWritten=false，auditLogMutated=false，rollbackPackageMutated=false。

Dual JSON 纠错事件纠错事务 MCP Queue MCP Document Citation Lookup 回滚包 BBS 双签范式

4双签 schema

4可校验

4同人禁止

4Approval 禁写

4approvalDigest

0实际写入

Dual Control Approval

发起人与复核人门禁

当前展示单资产/小范围双签详情。

双人确认 dry-run 可校验

元数据纠错 / 香港 Office Harbor Tower

AI / AI 回答脚注 / 批准发布 dry-run

Dual JSON

asset_visual_local_source_surface_release_audit_correction_approvalsinitiator=qareviewer=opssamePersonForbidden=truesecondConfirmRequired=true

approvalDigestb1e24027ae3d...1a76f1

correctionDigest41597525fcb6...ca8197

rollbackDigest3a9b10fcbf36...1ed4b7

dualControlDryRun=truedualControlWriteDisabled=trueapprovalWritten=falsecorrectionEventWritten=falseauditLogMutated=falserollbackPackageMutated=falsesessionCreated=falsemcpIndexWritten=falsetradingUseDisabled=true

Role Matrixops: initiate=true / review=true / 负责发起源图消费面纠错、核对回滚包和运营变更单，但不能绕过双人确认。qa: initiate=true / review=true / 负责 digest、source markers、consumer surface 与只读展示一致性复核。editor: initiate=true / review=true / 负责官网、BBS、AI 脚注和公开文案 redaction 口径复核。compliance: initiate=false / review=false / 负责 redaction、策略阻断、非投资建议和 no-trading 红线。admin: initiate=true / review=true / 可以填任一槽位，但不能绕过同人禁止、原审计不可变、原回滚包不可变和写入禁用。

{
  "table": "asset_visual_local_source_surface_release_audit_correction_approvals",
  "schemaVersion": "2026-07-local-source-surface-release-audit-correction-dual-control-v1",
  "approvalId": "asset-visual-local-source-surface-release-audit-correction-dual-control-hk-office-harbor-tower-ai-assistant-approve-surface-release-dry-run",
  "approvalType": "local-source-surface-release-audit-correction-dual-control",
  "correctionEventId": "asset-visual-local-source-surface-release-audit-correction-hk-office-harbor-tower-ai-assistant-approve-surface-release-dry-run",
  "correctionDigest": "41597525fcb64835ebc5f089a45a0e574714a0ea8002127bdfdedc8e24ca8197",
  "targetAuditLogId": "asset-visual-local-source-surface-release-action-audit-hk-office-harbor-tower-ai-assistant-approve-surface-release-dry-run",
  "targetAuditDigest": "75068b7bb7fbfeaece52e4c0584b14e19c2e44faafd1d40d0fd5e6e6d474c0b1",
  "targetRollbackPackageId": "asset-visual-local-source-surface-release-rollback-hk-office-harbor-tower-ai-assistant-approve-surface-release-dry-run",
  "targetRollbackDigest": "3a9b10fcbf36bdd4e302ea992bb2068da995937cec7600ef9f39ab20181ed4b7",
  "actionDigest": "85ad011d5c0adec59ec4aadb8f98addfcd2c226ddfb77b231c224411f149a54f",
  "releaseDigest": "b18f50d362351a4fef9565bc0f7374268ab1b219fb20096db95579610487e31d",
  "sourceManifestDigest": "0d564632a24c6895ded4692cf3eb9120f861566dd66f033c60c13a1007eba337",
  "correctionType": "metadata-correction",
  "consumer": "ai-assistant",
  "surface": "ai-answer",
  "initiatorRole": "qa",
  "reviewerRole": "ops",
  "secondConfirmRequired": true,
  "samePersonForbidden": true,
  "originalAuditImmutable": true,
  "originalRollbackImmutable": true,
  "createdAt": "2026-07-31T18:33:40.903Z",
  "writeMode": "dry-run-only"
}

{
  "initiatorSlot": "local-source-correction-initiator",
  "reviewerSlot": "local-source-correction-reviewer",
  "futureIdentityProvider": "future:ops-sso + local-source-surface-release-actor-snapshot",
  "sessionStorage": "future:httpOnly-session + immutable correction approval snapshot",
  "proofRequiredBeforeWrite": true,
  "approvalWriteDisabled": true,
  "correctionWriteDisabled": true,
  "preserveAuditDigest": true,
  "preserveRollbackDigest": true,
  "noPublicSideEffect": true
}

双签详情 Tx Fix Fix Queue Fix Document 纠错事件回滚包资产详情

双人确认 dry-run 可校验

元数据纠错 / 香港 Office Harbor Tower

AI / AI 回答脚注 / 请求文案修复

Dual JSON

asset_visual_local_source_surface_release_audit_correction_approvalsinitiator=qareviewer=opssamePersonForbidden=truesecondConfirmRequired=true

approvalDigeste7f42b10cfd2...04f314

correctionDigest96fb3cc7791e...b00355

rollbackDigest9ba0609fd0c1...1c9e56

{
  "table": "asset_visual_local_source_surface_release_audit_correction_approvals",
  "schemaVersion": "2026-07-local-source-surface-release-audit-correction-dual-control-v1",
  "approvalId": "asset-visual-local-source-surface-release-audit-correction-dual-control-hk-office-harbor-tower-ai-assistant-request-surface-copy-fix",
  "approvalType": "local-source-surface-release-audit-correction-dual-control",
  "correctionEventId": "asset-visual-local-source-surface-release-audit-correction-hk-office-harbor-tower-ai-assistant-request-surface-copy-fix",
  "correctionDigest": "96fb3cc7791e74247cf67879284c1912bfd22e5d3b21829d49a7be172ab00355",
  "targetAuditLogId": "asset-visual-local-source-surface-release-action-audit-hk-office-harbor-tower-ai-assistant-request-surface-copy-fix",
  "targetAuditDigest": "da3d6ae02ed3e07e5a3043f7acc0afdd833abc250d474e6709dc885d2261e7f7",
  "targetRollbackPackageId": "asset-visual-local-source-surface-release-rollback-hk-office-harbor-tower-ai-assistant-request-surface-copy-fix",
  "targetRollbackDigest": "9ba0609fd0c195b66bc1d2c81212412826e7f682149593ca64d2f74eb41c9e56",
  "actionDigest": "b8e0b044b0454d603916d7479c568bc6f96f4b81afd5ae99ef6b6d3cefe18a03",
  "releaseDigest": "b18f50d362351a4fef9565bc0f7374268ab1b219fb20096db95579610487e31d",
  "sourceManifestDigest": "0d564632a24c6895ded4692cf3eb9120f861566dd66f033c60c13a1007eba337",
  "correctionType": "metadata-correction",
  "consumer": "ai-assistant",
  "surface": "ai-answer",
  "initiatorRole": "qa",
  "reviewerRole": "ops",
  "secondConfirmRequired": true,
  "samePersonForbidden": true,
  "originalAuditImmutable": true,
  "originalRollbackImmutable": true,
  "createdAt": "2026-07-31T18:33:40.903Z",
  "writeMode": "dry-run-only"
}

{
  "initiatorSlot": "local-source-correction-initiator",
  "reviewerSlot": "local-source-correction-reviewer",
  "futureIdentityProvider": "future:ops-sso + local-source-surface-release-actor-snapshot",
  "sessionStorage": "future:httpOnly-session + immutable correction approval snapshot",
  "proofRequiredBeforeWrite": true,
  "approvalWriteDisabled": true,
  "correctionWriteDisabled": true,
  "preserveAuditDigest": true,
  "preserveRollbackDigest": true,
  "noPublicSideEffect": true
}

双签详情 Tx Fix Fix Queue Fix Document 纠错事件回滚包资产详情

双人确认 dry-run 可校验

策略说明 / 香港 Office Harbor Tower

AI / AI 回答脚注 / 请求风控复核

Dual JSON

asset_visual_local_source_surface_release_audit_correction_approvalsinitiator=opsreviewer=compliancesamePersonForbidden=truesecondConfirmRequired=true

approvalDigest0ff801a9d8f0...dacb57

correctionDigest693c5b8e9ebc...604e76

rollbackDigestcd33426b8595...7ec5bd

Role Matrixops: initiate=true / review=true / 负责发起源图消费面纠错、核对回滚包和运营变更单，但不能绕过双人确认。qa: initiate=false / review=false / 负责 digest、source markers、consumer surface 与只读展示一致性复核。editor: initiate=false / review=false / 负责官网、BBS、AI 脚注和公开文案 redaction 口径复核。compliance: initiate=true / review=true / 负责 redaction、策略阻断、非投资建议和 no-trading 红线。admin: initiate=true / review=true / 可以填任一槽位，但不能绕过同人禁止、原审计不可变、原回滚包不可变和写入禁用。

{
  "table": "asset_visual_local_source_surface_release_audit_correction_approvals",
  "schemaVersion": "2026-07-local-source-surface-release-audit-correction-dual-control-v1",
  "approvalId": "asset-visual-local-source-surface-release-audit-correction-dual-control-hk-office-harbor-tower-ai-assistant-request-risk-review",
  "approvalType": "local-source-surface-release-audit-correction-dual-control",
  "correctionEventId": "asset-visual-local-source-surface-release-audit-correction-hk-office-harbor-tower-ai-assistant-request-risk-review",
  "correctionDigest": "693c5b8e9ebcfa9a39243cd14b45c4b3e8c2343ca4c4533bd9ce679bd9604e76",
  "targetAuditLogId": "asset-visual-local-source-surface-release-action-audit-hk-office-harbor-tower-ai-assistant-request-risk-review",
  "targetAuditDigest": "421d409823269f4210a701ceadb8031c08612761c403b78a591c3c2cbf7633fc",
  "targetRollbackPackageId": "asset-visual-local-source-surface-release-rollback-hk-office-harbor-tower-ai-assistant-request-risk-review",
  "targetRollbackDigest": "cd33426b85954c9cde95214c00af7662920460e2f66dc731febc7953017ec5bd",
  "actionDigest": "7868c7ea99701e211e263b233b3c6f963625961b03d31848afbe9a150e214699",
  "releaseDigest": "b18f50d362351a4fef9565bc0f7374268ab1b219fb20096db95579610487e31d",
  "sourceManifestDigest": "0d564632a24c6895ded4692cf3eb9120f861566dd66f033c60c13a1007eba337",
  "correctionType": "policy-blocker-note",
  "consumer": "ai-assistant",
  "surface": "ai-answer",
  "initiatorRole": "ops",
  "reviewerRole": "compliance",
  "secondConfirmRequired": true,
  "samePersonForbidden": true,
  "originalAuditImmutable": true,
  "originalRollbackImmutable": true,
  "createdAt": "2026-07-31T18:33:40.903Z",
  "writeMode": "dry-run-only"
}

{
  "initiatorSlot": "local-source-correction-initiator",
  "reviewerSlot": "local-source-correction-reviewer",
  "futureIdentityProvider": "future:ops-sso + local-source-surface-release-actor-snapshot",
  "sessionStorage": "future:httpOnly-session + immutable correction approval snapshot",
  "proofRequiredBeforeWrite": true,
  "approvalWriteDisabled": true,
  "correctionWriteDisabled": true,
  "preserveAuditDigest": true,
  "preserveRollbackDigest": true,
  "noPublicSideEffect": true
}

双签详情 Tx Fix Fix Queue Fix Document 纠错事件回滚包资产详情

双人确认 dry-run 可校验

Redaction 请求 / 香港 Office Harbor Tower

AI / AI 回答脚注 / 拒绝发布

Dual JSON

asset_visual_local_source_surface_release_audit_correction_approvalsinitiator=compliancereviewer=editorsamePersonForbidden=truesecondConfirmRequired=true

approvalDigesta1653093d5d8...592b75

correctionDigest40de936680ea...fbc9fe

rollbackDigestfa6ab7c78c18...47ff35

Role Matrixops: initiate=true / review=false / 负责发起源图消费面纠错、核对回滚包和运营变更单，但不能绕过双人确认。qa: initiate=true / review=false / 负责 digest、source markers、consumer surface 与只读展示一致性复核。editor: initiate=true / review=true / 负责官网、BBS、AI 脚注和公开文案 redaction 口径复核。compliance: initiate=true / review=true / 负责 redaction、策略阻断、非投资建议和 no-trading 红线。admin: initiate=true / review=true / 可以填任一槽位，但不能绕过同人禁止、原审计不可变、原回滚包不可变和写入禁用。

{
  "table": "asset_visual_local_source_surface_release_audit_correction_approvals",
  "schemaVersion": "2026-07-local-source-surface-release-audit-correction-dual-control-v1",
  "approvalId": "asset-visual-local-source-surface-release-audit-correction-dual-control-hk-office-harbor-tower-ai-assistant-reject-surface-release",
  "approvalType": "local-source-surface-release-audit-correction-dual-control",
  "correctionEventId": "asset-visual-local-source-surface-release-audit-correction-hk-office-harbor-tower-ai-assistant-reject-surface-release",
  "correctionDigest": "40de936680eacb517612431822f0c8851e184106b694878d4383f6bd60fbc9fe",
  "targetAuditLogId": "asset-visual-local-source-surface-release-action-audit-hk-office-harbor-tower-ai-assistant-reject-surface-release",
  "targetAuditDigest": "1b68be1d6a37e68804d40c399bda6087027a4ac59a2d5b1d14c46cb0a145841a",
  "targetRollbackPackageId": "asset-visual-local-source-surface-release-rollback-hk-office-harbor-tower-ai-assistant-reject-surface-release",
  "targetRollbackDigest": "fa6ab7c78c18513e285fe70c4ce72a2a1388ebfd4b42b252255679d6ba47ff35",
  "actionDigest": "443c81375cc29a5869a1bc90964aafbee20c61b5eb5fce066689fe8bd37fe187",
  "releaseDigest": "b18f50d362351a4fef9565bc0f7374268ab1b219fb20096db95579610487e31d",
  "sourceManifestDigest": "0d564632a24c6895ded4692cf3eb9120f861566dd66f033c60c13a1007eba337",
  "correctionType": "redaction-request",
  "consumer": "ai-assistant",
  "surface": "ai-answer",
  "initiatorRole": "compliance",
  "reviewerRole": "editor",
  "secondConfirmRequired": true,
  "samePersonForbidden": true,
  "originalAuditImmutable": true,
  "originalRollbackImmutable": true,
  "createdAt": "2026-07-31T18:33:40.903Z",
  "writeMode": "dry-run-only"
}

{
  "initiatorSlot": "local-source-correction-initiator",
  "reviewerSlot": "local-source-correction-reviewer",
  "futureIdentityProvider": "future:ops-sso + local-source-surface-release-actor-snapshot",
  "sessionStorage": "future:httpOnly-session + immutable correction approval snapshot",
  "proofRequiredBeforeWrite": true,
  "approvalWriteDisabled": true,
  "correctionWriteDisabled": true,
  "preserveAuditDigest": true,
  "preserveRollbackDigest": true,
  "noPublicSideEffect": true
}