Architecture Cut 72 / Local Source Correction Dual Control

源图审计纠错双人确认 Dry-run

为源图发布审计 correction 事件生成双人确认 schema、角色矩阵、同人禁止和 approvalDigest。当前只读预演：approvalWritten=false，correctionEventWritten=false，auditLogMutated=false，rollbackPackageMutated=false。

Dual JSON 纠错事件纠错事务 MCP Queue MCP Document Citation Lookup 回滚包 BBS 双签范式

4双签 schema

4可校验

4同人禁止

4Approval 禁写

4approvalDigest

0实际写入

Dual Control Approval

发起人与复核人门禁

当前展示单资产/小范围双签详情。

双人确认 dry-run 可校验

元数据纠错 / 美国数据中心 Grid Node

资产地图 / 地图资产详情 / 批准发布 dry-run

Dual JSON

asset_visual_local_source_surface_release_audit_correction_approvalsinitiator=qareviewer=qasamePersonForbidden=truesecondConfirmRequired=true

approvalDigestc3538954fe0c...b09297

correctionDigestf83c83405632...d40e4c

rollbackDigest743bbfa88b30...116ae2

dualControlDryRun=truedualControlWriteDisabled=trueapprovalWritten=falsecorrectionEventWritten=falseauditLogMutated=falserollbackPackageMutated=falsesessionCreated=falsemcpIndexWritten=falsetradingUseDisabled=true

Role Matrixops: initiate=true / review=true / 负责发起源图消费面纠错、核对回滚包和运营变更单，但不能绕过双人确认。qa: initiate=true / review=true / 负责 digest、source markers、consumer surface 与只读展示一致性复核。editor: initiate=true / review=true / 负责官网、BBS、AI 脚注和公开文案 redaction 口径复核。compliance: initiate=false / review=false / 负责 redaction、策略阻断、非投资建议和 no-trading 红线。admin: initiate=true / review=true / 可以填任一槽位，但不能绕过同人禁止、原审计不可变、原回滚包不可变和写入禁用。

{
  "table": "asset_visual_local_source_surface_release_audit_correction_approvals",
  "schemaVersion": "2026-07-local-source-surface-release-audit-correction-dual-control-v1",
  "approvalId": "asset-visual-local-source-surface-release-audit-correction-dual-control-us-data-center-grid-node-asset-map-approve-surface-release-dry-run",
  "approvalType": "local-source-surface-release-audit-correction-dual-control",
  "correctionEventId": "asset-visual-local-source-surface-release-audit-correction-us-data-center-grid-node-asset-map-approve-surface-release-dry-run",
  "correctionDigest": "f83c83405632f18d5fb479fdab89cdee96451b0e06cdf3bf24cd65ad36d40e4c",
  "targetAuditLogId": "asset-visual-local-source-surface-release-action-audit-us-data-center-grid-node-asset-map-approve-surface-release-dry-run",
  "targetAuditDigest": "b6e88cd940a5ff752244d4beaf4db649c1420ba103f3838176ad93a0479ce4fe",
  "targetRollbackPackageId": "asset-visual-local-source-surface-release-rollback-us-data-center-grid-node-asset-map-approve-surface-release-dry-run",
  "targetRollbackDigest": "743bbfa88b304b9ac63ec5f0edcbe5078a49d42c0c562731d94e9c288f116ae2",
  "actionDigest": "a10272f3ae03c0c78a104152cd583c2b527e8ad2c9442956ffb447400397cc30",
  "releaseDigest": "0fada913451068fa45640b7102fafcdb027c0265affaa535c7d0010ad8084c86",
  "sourceManifestDigest": "f675cc4028057b4e58e4098e2925618b67ef55e8f66c492a5cec812ef61c39ea",
  "correctionType": "metadata-correction",
  "consumer": "asset-map",
  "surface": "asset-map-detail",
  "initiatorRole": "qa",
  "reviewerRole": "qa",
  "secondConfirmRequired": true,
  "samePersonForbidden": true,
  "originalAuditImmutable": true,
  "originalRollbackImmutable": true,
  "createdAt": "2026-07-31T18:33:40.903Z",
  "writeMode": "dry-run-only"
}

{
  "initiatorSlot": "local-source-correction-initiator",
  "reviewerSlot": "local-source-correction-reviewer",
  "futureIdentityProvider": "future:ops-sso + local-source-surface-release-actor-snapshot",
  "sessionStorage": "future:httpOnly-session + immutable correction approval snapshot",
  "proofRequiredBeforeWrite": true,
  "approvalWriteDisabled": true,
  "correctionWriteDisabled": true,
  "preserveAuditDigest": true,
  "preserveRollbackDigest": true,
  "noPublicSideEffect": true
}

双签详情 Tx Fix Fix Queue Fix Document 纠错事件回滚包资产详情

双人确认 dry-run 可校验

元数据纠错 / 美国数据中心 Grid Node

资产地图 / 地图资产详情 / 请求文案修复

Dual JSON

asset_visual_local_source_surface_release_audit_correction_approvalsinitiator=qareviewer=qasamePersonForbidden=truesecondConfirmRequired=true

approvalDigest231c6a49bbcd...91b26f

correctionDigestac4441021a3d...0d7703

rollbackDigest8965fb1aaad8...29c0b5

{
  "table": "asset_visual_local_source_surface_release_audit_correction_approvals",
  "schemaVersion": "2026-07-local-source-surface-release-audit-correction-dual-control-v1",
  "approvalId": "asset-visual-local-source-surface-release-audit-correction-dual-control-us-data-center-grid-node-asset-map-request-surface-copy-fix",
  "approvalType": "local-source-surface-release-audit-correction-dual-control",
  "correctionEventId": "asset-visual-local-source-surface-release-audit-correction-us-data-center-grid-node-asset-map-request-surface-copy-fix",
  "correctionDigest": "ac4441021a3d5cee84de9373d1492b58d1ce67316dd57b6c9ab64007720d7703",
  "targetAuditLogId": "asset-visual-local-source-surface-release-action-audit-us-data-center-grid-node-asset-map-request-surface-copy-fix",
  "targetAuditDigest": "813ce7691120e603976d93cd5db789b3a753629055b665681083e001554839ef",
  "targetRollbackPackageId": "asset-visual-local-source-surface-release-rollback-us-data-center-grid-node-asset-map-request-surface-copy-fix",
  "targetRollbackDigest": "8965fb1aaad80b0622cfafe18a242153f8c18dc78a524cc8284f3cd90629c0b5",
  "actionDigest": "2d8942dc14ff50c1ad7ce30dae5b6b3fc1e749a77935b95361577cf315b05b3d",
  "releaseDigest": "0fada913451068fa45640b7102fafcdb027c0265affaa535c7d0010ad8084c86",
  "sourceManifestDigest": "f675cc4028057b4e58e4098e2925618b67ef55e8f66c492a5cec812ef61c39ea",
  "correctionType": "metadata-correction",
  "consumer": "asset-map",
  "surface": "asset-map-detail",
  "initiatorRole": "qa",
  "reviewerRole": "qa",
  "secondConfirmRequired": true,
  "samePersonForbidden": true,
  "originalAuditImmutable": true,
  "originalRollbackImmutable": true,
  "createdAt": "2026-07-31T18:33:40.903Z",
  "writeMode": "dry-run-only"
}

{
  "initiatorSlot": "local-source-correction-initiator",
  "reviewerSlot": "local-source-correction-reviewer",
  "futureIdentityProvider": "future:ops-sso + local-source-surface-release-actor-snapshot",
  "sessionStorage": "future:httpOnly-session + immutable correction approval snapshot",
  "proofRequiredBeforeWrite": true,
  "approvalWriteDisabled": true,
  "correctionWriteDisabled": true,
  "preserveAuditDigest": true,
  "preserveRollbackDigest": true,
  "noPublicSideEffect": true
}

双签详情 Tx Fix Fix Queue Fix Document 纠错事件回滚包资产详情

双人确认 dry-run 可校验

策略说明 / 美国数据中心 Grid Node

资产地图 / 地图资产详情 / 请求风控复核

Dual JSON

asset_visual_local_source_surface_release_audit_correction_approvalsinitiator=opsreviewer=compliancesamePersonForbidden=truesecondConfirmRequired=true

approvalDigest454f40c97e2e...390a8a

correctionDigest16e48c9d5440...9e5a65

rollbackDigest252a4dcbd3e5...56e6c6

Role Matrixops: initiate=true / review=true / 负责发起源图消费面纠错、核对回滚包和运营变更单，但不能绕过双人确认。qa: initiate=false / review=false / 负责 digest、source markers、consumer surface 与只读展示一致性复核。editor: initiate=false / review=false / 负责官网、BBS、AI 脚注和公开文案 redaction 口径复核。compliance: initiate=true / review=true / 负责 redaction、策略阻断、非投资建议和 no-trading 红线。admin: initiate=true / review=true / 可以填任一槽位，但不能绕过同人禁止、原审计不可变、原回滚包不可变和写入禁用。

{
  "table": "asset_visual_local_source_surface_release_audit_correction_approvals",
  "schemaVersion": "2026-07-local-source-surface-release-audit-correction-dual-control-v1",
  "approvalId": "asset-visual-local-source-surface-release-audit-correction-dual-control-us-data-center-grid-node-asset-map-request-risk-review",
  "approvalType": "local-source-surface-release-audit-correction-dual-control",
  "correctionEventId": "asset-visual-local-source-surface-release-audit-correction-us-data-center-grid-node-asset-map-request-risk-review",
  "correctionDigest": "16e48c9d54401c4d6a98431729916f39253d0301ddc5e0ae3509fb8f9d9e5a65",
  "targetAuditLogId": "asset-visual-local-source-surface-release-action-audit-us-data-center-grid-node-asset-map-request-risk-review",
  "targetAuditDigest": "db3281201ba0909da494223e505e3bcb4bba2146ccdbb89ee7d7853d1d4db765",
  "targetRollbackPackageId": "asset-visual-local-source-surface-release-rollback-us-data-center-grid-node-asset-map-request-risk-review",
  "targetRollbackDigest": "252a4dcbd3e50222430b0f3368a89e7af6137c880b167368d06133b25e56e6c6",
  "actionDigest": "5b5eb7943f46ea10bf0fc8604ac1df33cb2bb13781cc92e559d82838ab6cb493",
  "releaseDigest": "0fada913451068fa45640b7102fafcdb027c0265affaa535c7d0010ad8084c86",
  "sourceManifestDigest": "f675cc4028057b4e58e4098e2925618b67ef55e8f66c492a5cec812ef61c39ea",
  "correctionType": "policy-blocker-note",
  "consumer": "asset-map",
  "surface": "asset-map-detail",
  "initiatorRole": "ops",
  "reviewerRole": "compliance",
  "secondConfirmRequired": true,
  "samePersonForbidden": true,
  "originalAuditImmutable": true,
  "originalRollbackImmutable": true,
  "createdAt": "2026-07-31T18:33:40.903Z",
  "writeMode": "dry-run-only"
}

{
  "initiatorSlot": "local-source-correction-initiator",
  "reviewerSlot": "local-source-correction-reviewer",
  "futureIdentityProvider": "future:ops-sso + local-source-surface-release-actor-snapshot",
  "sessionStorage": "future:httpOnly-session + immutable correction approval snapshot",
  "proofRequiredBeforeWrite": true,
  "approvalWriteDisabled": true,
  "correctionWriteDisabled": true,
  "preserveAuditDigest": true,
  "preserveRollbackDigest": true,
  "noPublicSideEffect": true
}

双签详情 Tx Fix Fix Queue Fix Document 纠错事件回滚包资产详情

双人确认 dry-run 可校验

Redaction 请求 / 美国数据中心 Grid Node

资产地图 / 地图资产详情 / 拒绝发布

Dual JSON

asset_visual_local_source_surface_release_audit_correction_approvalsinitiator=compliancereviewer=compliancesamePersonForbidden=truesecondConfirmRequired=true

approvalDigestb18b36b957bd...0fb4c5

correctionDigest4c0483f3ef6d...de8eb1

rollbackDigest5658d4acbcf1...af53b4

Role Matrixops: initiate=true / review=false / 负责发起源图消费面纠错、核对回滚包和运营变更单，但不能绕过双人确认。qa: initiate=true / review=false / 负责 digest、source markers、consumer surface 与只读展示一致性复核。editor: initiate=true / review=true / 负责官网、BBS、AI 脚注和公开文案 redaction 口径复核。compliance: initiate=true / review=true / 负责 redaction、策略阻断、非投资建议和 no-trading 红线。admin: initiate=true / review=true / 可以填任一槽位，但不能绕过同人禁止、原审计不可变、原回滚包不可变和写入禁用。

{
  "table": "asset_visual_local_source_surface_release_audit_correction_approvals",
  "schemaVersion": "2026-07-local-source-surface-release-audit-correction-dual-control-v1",
  "approvalId": "asset-visual-local-source-surface-release-audit-correction-dual-control-us-data-center-grid-node-asset-map-reject-surface-release",
  "approvalType": "local-source-surface-release-audit-correction-dual-control",
  "correctionEventId": "asset-visual-local-source-surface-release-audit-correction-us-data-center-grid-node-asset-map-reject-surface-release",
  "correctionDigest": "4c0483f3ef6d6ead67a074488f044f7560de362f7fd6a21c1aa174e23fde8eb1",
  "targetAuditLogId": "asset-visual-local-source-surface-release-action-audit-us-data-center-grid-node-asset-map-reject-surface-release",
  "targetAuditDigest": "6996ecb49554a2c544893414356d65f0a0c6db3e775737a6f89e2415c6cc781a",
  "targetRollbackPackageId": "asset-visual-local-source-surface-release-rollback-us-data-center-grid-node-asset-map-reject-surface-release",
  "targetRollbackDigest": "5658d4acbcf1961c82ab28480f61fd1c24b5219ac99eeb3af97b4057f1af53b4",
  "actionDigest": "e5111c30131b7c0b32adb6521f17d88b4197b9963ec393b378c8d96da567ba8d",
  "releaseDigest": "0fada913451068fa45640b7102fafcdb027c0265affaa535c7d0010ad8084c86",
  "sourceManifestDigest": "f675cc4028057b4e58e4098e2925618b67ef55e8f66c492a5cec812ef61c39ea",
  "correctionType": "redaction-request",
  "consumer": "asset-map",
  "surface": "asset-map-detail",
  "initiatorRole": "compliance",
  "reviewerRole": "compliance",
  "secondConfirmRequired": true,
  "samePersonForbidden": true,
  "originalAuditImmutable": true,
  "originalRollbackImmutable": true,
  "createdAt": "2026-07-31T18:33:40.903Z",
  "writeMode": "dry-run-only"
}

{
  "initiatorSlot": "local-source-correction-initiator",
  "reviewerSlot": "local-source-correction-reviewer",
  "futureIdentityProvider": "future:ops-sso + local-source-surface-release-actor-snapshot",
  "sessionStorage": "future:httpOnly-session + immutable correction approval snapshot",
  "proofRequiredBeforeWrite": true,
  "approvalWriteDisabled": true,
  "correctionWriteDisabled": true,
  "preserveAuditDigest": true,
  "preserveRollbackDigest": true,
  "noPublicSideEffect": true
}