Architecture Cut 72 / Local Source Correction Dual Control

源图审计纠错双人确认 Dry-run

为源图发布审计 correction 事件生成双人确认 schema、角色矩阵、同人禁止和 approvalDigest。当前只读预演：approvalWritten=false，correctionEventWritten=false，auditLogMutated=false，rollbackPackageMutated=false。

Dual JSON 纠错事件纠错事务 MCP Queue MCP Document Citation Lookup 回滚包 BBS 双签范式

4双签 schema

4可校验

4同人禁止

4Approval 禁写

4approvalDigest

0实际写入

Dual Control Approval

发起人与复核人门禁

当前展示单资产/小范围双签详情。

双人确认 dry-run 可校验

元数据纠错 / 美国数据中心 Grid Node

AI / AI 回答脚注 / 批准发布 dry-run

Dual JSON

asset_visual_local_source_surface_release_audit_correction_approvalsinitiator=qareviewer=opssamePersonForbidden=truesecondConfirmRequired=true

approvalDigest71a868b20c91...94c058

correctionDigestbf64406072ce...dab0aa

rollbackDigeste9a8062fb9c2...cc675c

dualControlDryRun=truedualControlWriteDisabled=trueapprovalWritten=falsecorrectionEventWritten=falseauditLogMutated=falserollbackPackageMutated=falsesessionCreated=falsemcpIndexWritten=falsetradingUseDisabled=true

Role Matrixops: initiate=true / review=true / 负责发起源图消费面纠错、核对回滚包和运营变更单，但不能绕过双人确认。qa: initiate=true / review=true / 负责 digest、source markers、consumer surface 与只读展示一致性复核。editor: initiate=true / review=true / 负责官网、BBS、AI 脚注和公开文案 redaction 口径复核。compliance: initiate=false / review=false / 负责 redaction、策略阻断、非投资建议和 no-trading 红线。admin: initiate=true / review=true / 可以填任一槽位，但不能绕过同人禁止、原审计不可变、原回滚包不可变和写入禁用。

{
  "table": "asset_visual_local_source_surface_release_audit_correction_approvals",
  "schemaVersion": "2026-07-local-source-surface-release-audit-correction-dual-control-v1",
  "approvalId": "asset-visual-local-source-surface-release-audit-correction-dual-control-us-data-center-grid-node-ai-assistant-approve-surface-release-dry-run",
  "approvalType": "local-source-surface-release-audit-correction-dual-control",
  "correctionEventId": "asset-visual-local-source-surface-release-audit-correction-us-data-center-grid-node-ai-assistant-approve-surface-release-dry-run",
  "correctionDigest": "bf64406072cea039db1af120f55cbba50daed9c12560dc0bec69d3b9b0dab0aa",
  "targetAuditLogId": "asset-visual-local-source-surface-release-action-audit-us-data-center-grid-node-ai-assistant-approve-surface-release-dry-run",
  "targetAuditDigest": "32bfcc8831a92bf529a534693c0dcb1ed0744bf66f2ba05fd75f758371e3af43",
  "targetRollbackPackageId": "asset-visual-local-source-surface-release-rollback-us-data-center-grid-node-ai-assistant-approve-surface-release-dry-run",
  "targetRollbackDigest": "e9a8062fb9c23a41c82e127ecb257532ae6dd6a22949069d9c5ad3cff7cc675c",
  "actionDigest": "0b1569f2b7e87a062c93d1cab201536253e33c4f3b2834a58a64deef475ca620",
  "releaseDigest": "482fe7a061e58a2220ecee5376c15f3d0029fa6befbf80d32a51faf1e769810b",
  "sourceManifestDigest": "5d7ff00c28fd2ffd35d6181394b11df0d080ed324de67e8716cec66b554ca62b",
  "correctionType": "metadata-correction",
  "consumer": "ai-assistant",
  "surface": "ai-answer",
  "initiatorRole": "qa",
  "reviewerRole": "ops",
  "secondConfirmRequired": true,
  "samePersonForbidden": true,
  "originalAuditImmutable": true,
  "originalRollbackImmutable": true,
  "createdAt": "2026-07-31T18:33:40.903Z",
  "writeMode": "dry-run-only"
}

{
  "initiatorSlot": "local-source-correction-initiator",
  "reviewerSlot": "local-source-correction-reviewer",
  "futureIdentityProvider": "future:ops-sso + local-source-surface-release-actor-snapshot",
  "sessionStorage": "future:httpOnly-session + immutable correction approval snapshot",
  "proofRequiredBeforeWrite": true,
  "approvalWriteDisabled": true,
  "correctionWriteDisabled": true,
  "preserveAuditDigest": true,
  "preserveRollbackDigest": true,
  "noPublicSideEffect": true
}

双签详情 Tx Fix Fix Queue Fix Document 纠错事件回滚包资产详情

双人确认 dry-run 可校验

元数据纠错 / 美国数据中心 Grid Node

AI / AI 回答脚注 / 请求文案修复

Dual JSON

asset_visual_local_source_surface_release_audit_correction_approvalsinitiator=qareviewer=opssamePersonForbidden=truesecondConfirmRequired=true

approvalDigestbc7ff0c21c70...0c3992

correctionDigestc5be527bcd10...347166

rollbackDigest4a7e05731b8d...2915f4

{
  "table": "asset_visual_local_source_surface_release_audit_correction_approvals",
  "schemaVersion": "2026-07-local-source-surface-release-audit-correction-dual-control-v1",
  "approvalId": "asset-visual-local-source-surface-release-audit-correction-dual-control-us-data-center-grid-node-ai-assistant-request-surface-copy-fix",
  "approvalType": "local-source-surface-release-audit-correction-dual-control",
  "correctionEventId": "asset-visual-local-source-surface-release-audit-correction-us-data-center-grid-node-ai-assistant-request-surface-copy-fix",
  "correctionDigest": "c5be527bcd1085be7a18b86126c57df4e221a77863679dd9cd8738f64c347166",
  "targetAuditLogId": "asset-visual-local-source-surface-release-action-audit-us-data-center-grid-node-ai-assistant-request-surface-copy-fix",
  "targetAuditDigest": "c7ea0f951ba383fff725bf0d3720c56483c3d3c049d5cf81b363365d48ab8495",
  "targetRollbackPackageId": "asset-visual-local-source-surface-release-rollback-us-data-center-grid-node-ai-assistant-request-surface-copy-fix",
  "targetRollbackDigest": "4a7e05731b8db20d9e397bc60c4a0c6ce77c79a0834b6c76f95f60235f2915f4",
  "actionDigest": "c32605c08069a84009507562544c557ea87d52c190e55c635a60e4ddcb897811",
  "releaseDigest": "482fe7a061e58a2220ecee5376c15f3d0029fa6befbf80d32a51faf1e769810b",
  "sourceManifestDigest": "5d7ff00c28fd2ffd35d6181394b11df0d080ed324de67e8716cec66b554ca62b",
  "correctionType": "metadata-correction",
  "consumer": "ai-assistant",
  "surface": "ai-answer",
  "initiatorRole": "qa",
  "reviewerRole": "ops",
  "secondConfirmRequired": true,
  "samePersonForbidden": true,
  "originalAuditImmutable": true,
  "originalRollbackImmutable": true,
  "createdAt": "2026-07-31T18:33:40.903Z",
  "writeMode": "dry-run-only"
}

{
  "initiatorSlot": "local-source-correction-initiator",
  "reviewerSlot": "local-source-correction-reviewer",
  "futureIdentityProvider": "future:ops-sso + local-source-surface-release-actor-snapshot",
  "sessionStorage": "future:httpOnly-session + immutable correction approval snapshot",
  "proofRequiredBeforeWrite": true,
  "approvalWriteDisabled": true,
  "correctionWriteDisabled": true,
  "preserveAuditDigest": true,
  "preserveRollbackDigest": true,
  "noPublicSideEffect": true
}

双签详情 Tx Fix Fix Queue Fix Document 纠错事件回滚包资产详情

双人确认 dry-run 可校验

策略说明 / 美国数据中心 Grid Node

AI / AI 回答脚注 / 请求风控复核

Dual JSON

asset_visual_local_source_surface_release_audit_correction_approvalsinitiator=opsreviewer=compliancesamePersonForbidden=truesecondConfirmRequired=true

approvalDigest94aa6b17a369...8fb8bf

correctionDigest854096f2f1d8...1ec4bd

rollbackDigest4894e677aac0...cbce64

Role Matrixops: initiate=true / review=true / 负责发起源图消费面纠错、核对回滚包和运营变更单，但不能绕过双人确认。qa: initiate=false / review=false / 负责 digest、source markers、consumer surface 与只读展示一致性复核。editor: initiate=false / review=false / 负责官网、BBS、AI 脚注和公开文案 redaction 口径复核。compliance: initiate=true / review=true / 负责 redaction、策略阻断、非投资建议和 no-trading 红线。admin: initiate=true / review=true / 可以填任一槽位，但不能绕过同人禁止、原审计不可变、原回滚包不可变和写入禁用。

{
  "table": "asset_visual_local_source_surface_release_audit_correction_approvals",
  "schemaVersion": "2026-07-local-source-surface-release-audit-correction-dual-control-v1",
  "approvalId": "asset-visual-local-source-surface-release-audit-correction-dual-control-us-data-center-grid-node-ai-assistant-request-risk-review",
  "approvalType": "local-source-surface-release-audit-correction-dual-control",
  "correctionEventId": "asset-visual-local-source-surface-release-audit-correction-us-data-center-grid-node-ai-assistant-request-risk-review",
  "correctionDigest": "854096f2f1d83722c94a548cd9c1a3d9456e78cbfe44b387cf93b7f7401ec4bd",
  "targetAuditLogId": "asset-visual-local-source-surface-release-action-audit-us-data-center-grid-node-ai-assistant-request-risk-review",
  "targetAuditDigest": "d9ec316b053cc89964c0220d771fce22369d7a2745183d454066667f4047b500",
  "targetRollbackPackageId": "asset-visual-local-source-surface-release-rollback-us-data-center-grid-node-ai-assistant-request-risk-review",
  "targetRollbackDigest": "4894e677aac0d08e51847f95adfe1d19816651f2d29ccdc9499f43c9a3cbce64",
  "actionDigest": "5848f6889b8cb50c76a5e14bf1761fb5a663bf69209c1c95b9f830227c0cc44d",
  "releaseDigest": "482fe7a061e58a2220ecee5376c15f3d0029fa6befbf80d32a51faf1e769810b",
  "sourceManifestDigest": "5d7ff00c28fd2ffd35d6181394b11df0d080ed324de67e8716cec66b554ca62b",
  "correctionType": "policy-blocker-note",
  "consumer": "ai-assistant",
  "surface": "ai-answer",
  "initiatorRole": "ops",
  "reviewerRole": "compliance",
  "secondConfirmRequired": true,
  "samePersonForbidden": true,
  "originalAuditImmutable": true,
  "originalRollbackImmutable": true,
  "createdAt": "2026-07-31T18:33:40.903Z",
  "writeMode": "dry-run-only"
}

{
  "initiatorSlot": "local-source-correction-initiator",
  "reviewerSlot": "local-source-correction-reviewer",
  "futureIdentityProvider": "future:ops-sso + local-source-surface-release-actor-snapshot",
  "sessionStorage": "future:httpOnly-session + immutable correction approval snapshot",
  "proofRequiredBeforeWrite": true,
  "approvalWriteDisabled": true,
  "correctionWriteDisabled": true,
  "preserveAuditDigest": true,
  "preserveRollbackDigest": true,
  "noPublicSideEffect": true
}

双签详情 Tx Fix Fix Queue Fix Document 纠错事件回滚包资产详情

双人确认 dry-run 可校验

Redaction 请求 / 美国数据中心 Grid Node

AI / AI 回答脚注 / 拒绝发布

Dual JSON

asset_visual_local_source_surface_release_audit_correction_approvalsinitiator=compliancereviewer=editorsamePersonForbidden=truesecondConfirmRequired=true

approvalDigestbc95b689b0d7...e76d9e

correctionDigestf79a454e6c44...ec244e

rollbackDigest36c3fd7d4d58...190623

Role Matrixops: initiate=true / review=false / 负责发起源图消费面纠错、核对回滚包和运营变更单，但不能绕过双人确认。qa: initiate=true / review=false / 负责 digest、source markers、consumer surface 与只读展示一致性复核。editor: initiate=true / review=true / 负责官网、BBS、AI 脚注和公开文案 redaction 口径复核。compliance: initiate=true / review=true / 负责 redaction、策略阻断、非投资建议和 no-trading 红线。admin: initiate=true / review=true / 可以填任一槽位，但不能绕过同人禁止、原审计不可变、原回滚包不可变和写入禁用。

{
  "table": "asset_visual_local_source_surface_release_audit_correction_approvals",
  "schemaVersion": "2026-07-local-source-surface-release-audit-correction-dual-control-v1",
  "approvalId": "asset-visual-local-source-surface-release-audit-correction-dual-control-us-data-center-grid-node-ai-assistant-reject-surface-release",
  "approvalType": "local-source-surface-release-audit-correction-dual-control",
  "correctionEventId": "asset-visual-local-source-surface-release-audit-correction-us-data-center-grid-node-ai-assistant-reject-surface-release",
  "correctionDigest": "f79a454e6c44e532ab5bbadae6609a8dab02b47d135ffbc0639fb978e6ec244e",
  "targetAuditLogId": "asset-visual-local-source-surface-release-action-audit-us-data-center-grid-node-ai-assistant-reject-surface-release",
  "targetAuditDigest": "0428e0fa10f51bfb6ee3d4b41f2b769992fba184e4a2abd3fa97614127f06b18",
  "targetRollbackPackageId": "asset-visual-local-source-surface-release-rollback-us-data-center-grid-node-ai-assistant-reject-surface-release",
  "targetRollbackDigest": "36c3fd7d4d58e4db8ffc643a4256772a5bd7d8b9ed5136f5fda4ed6345190623",
  "actionDigest": "47b416f87bb35637df2ab33b9bff73233b021d09d83ab19956efae9f734f486b",
  "releaseDigest": "482fe7a061e58a2220ecee5376c15f3d0029fa6befbf80d32a51faf1e769810b",
  "sourceManifestDigest": "5d7ff00c28fd2ffd35d6181394b11df0d080ed324de67e8716cec66b554ca62b",
  "correctionType": "redaction-request",
  "consumer": "ai-assistant",
  "surface": "ai-answer",
  "initiatorRole": "compliance",
  "reviewerRole": "editor",
  "secondConfirmRequired": true,
  "samePersonForbidden": true,
  "originalAuditImmutable": true,
  "originalRollbackImmutable": true,
  "createdAt": "2026-07-31T18:33:40.903Z",
  "writeMode": "dry-run-only"
}

{
  "initiatorSlot": "local-source-correction-initiator",
  "reviewerSlot": "local-source-correction-reviewer",
  "futureIdentityProvider": "future:ops-sso + local-source-surface-release-actor-snapshot",
  "sessionStorage": "future:httpOnly-session + immutable correction approval snapshot",
  "proofRequiredBeforeWrite": true,
  "approvalWriteDisabled": true,
  "correctionWriteDisabled": true,
  "preserveAuditDigest": true,
  "preserveRollbackDigest": true,
  "noPublicSideEffect": true
}