Architecture Cut 72 / Local Source Correction Dual Control

源图审计纠错双人确认 Dry-run

为源图发布审计 correction 事件生成双人确认 schema、角色矩阵、同人禁止和 approvalDigest。当前只读预演：approvalWritten=false，correctionEventWritten=false，auditLogMutated=false，rollbackPackageMutated=false。

Dual JSON 纠错事件纠错事务 MCP Queue MCP Document Citation Lookup 回滚包 BBS 双签范式

4双签 schema

4可校验

4同人禁止

4Approval 禁写

4approvalDigest

0实际写入

Dual Control Approval

发起人与复核人门禁

当前展示单资产/小范围双签详情。

双人确认 dry-run 可校验

元数据纠错 / 美国数据中心 Grid Node

资产地图 / 地图资产详情 / 批准发布 dry-run

Dual JSON

asset_visual_local_source_surface_release_audit_correction_approvalsinitiator=qareviewer=qasamePersonForbidden=truesecondConfirmRequired=true

approvalDigestdbf0a34e549e...d1e5f5

correctionDigest48b82f664b79...edf782

rollbackDigest4fb88bd8285f...6cf63c

dualControlDryRun=truedualControlWriteDisabled=trueapprovalWritten=falsecorrectionEventWritten=falseauditLogMutated=falserollbackPackageMutated=falsesessionCreated=falsemcpIndexWritten=falsetradingUseDisabled=true

Role Matrixops: initiate=true / review=true / 负责发起源图消费面纠错、核对回滚包和运营变更单，但不能绕过双人确认。qa: initiate=true / review=true / 负责 digest、source markers、consumer surface 与只读展示一致性复核。editor: initiate=true / review=true / 负责官网、BBS、AI 脚注和公开文案 redaction 口径复核。compliance: initiate=false / review=false / 负责 redaction、策略阻断、非投资建议和 no-trading 红线。admin: initiate=true / review=true / 可以填任一槽位，但不能绕过同人禁止、原审计不可变、原回滚包不可变和写入禁用。

{
  "table": "asset_visual_local_source_surface_release_audit_correction_approvals",
  "schemaVersion": "2026-07-local-source-surface-release-audit-correction-dual-control-v1",
  "approvalId": "asset-visual-local-source-surface-release-audit-correction-dual-control-us-data-center-grid-node-asset-map-approve-surface-release-dry-run",
  "approvalType": "local-source-surface-release-audit-correction-dual-control",
  "correctionEventId": "asset-visual-local-source-surface-release-audit-correction-us-data-center-grid-node-asset-map-approve-surface-release-dry-run",
  "correctionDigest": "48b82f664b79a7c3c55c293fb8e17bccd4bb42a7325098917faac1cffaedf782",
  "targetAuditLogId": "asset-visual-local-source-surface-release-action-audit-us-data-center-grid-node-asset-map-approve-surface-release-dry-run",
  "targetAuditDigest": "594e6c6f54b6d0ea7ce2b2e6feb3295c692da1eb6f675710e09cbcb643804b71",
  "targetRollbackPackageId": "asset-visual-local-source-surface-release-rollback-us-data-center-grid-node-asset-map-approve-surface-release-dry-run",
  "targetRollbackDigest": "4fb88bd8285f6476b483eaa293737fbfbb9b2aba81599c9a8cee365cf06cf63c",
  "actionDigest": "d56f40d3532694603f1b3893bf3425eeddf416cd868b2712d3c7b8ec2af07bf5",
  "releaseDigest": "e40fb96ce865023984dd99fd4dc1ff750b18545b57b3e2c2939208f18af6aad7",
  "sourceManifestDigest": "f15b2620b536ffe3946e05d6600ed6d4c620d244726ef1887e646ea4ca020472",
  "correctionType": "metadata-correction",
  "consumer": "asset-map",
  "surface": "asset-map-detail",
  "initiatorRole": "qa",
  "reviewerRole": "qa",
  "secondConfirmRequired": true,
  "samePersonForbidden": true,
  "originalAuditImmutable": true,
  "originalRollbackImmutable": true,
  "createdAt": "2026-07-31T18:33:40.903Z",
  "writeMode": "dry-run-only"
}

{
  "initiatorSlot": "local-source-correction-initiator",
  "reviewerSlot": "local-source-correction-reviewer",
  "futureIdentityProvider": "future:ops-sso + local-source-surface-release-actor-snapshot",
  "sessionStorage": "future:httpOnly-session + immutable correction approval snapshot",
  "proofRequiredBeforeWrite": true,
  "approvalWriteDisabled": true,
  "correctionWriteDisabled": true,
  "preserveAuditDigest": true,
  "preserveRollbackDigest": true,
  "noPublicSideEffect": true
}

双签详情 Tx Fix Fix Queue Fix Document 纠错事件回滚包资产详情

双人确认 dry-run 可校验

元数据纠错 / 美国数据中心 Grid Node

资产地图 / 地图资产详情 / 请求文案修复

Dual JSON

asset_visual_local_source_surface_release_audit_correction_approvalsinitiator=qareviewer=qasamePersonForbidden=truesecondConfirmRequired=true

approvalDigest31789362701e...7fc6fd

correctionDigest624d07f5a91b...936ab6

rollbackDigestbb92b74ca077...aa27e6

{
  "table": "asset_visual_local_source_surface_release_audit_correction_approvals",
  "schemaVersion": "2026-07-local-source-surface-release-audit-correction-dual-control-v1",
  "approvalId": "asset-visual-local-source-surface-release-audit-correction-dual-control-us-data-center-grid-node-asset-map-request-surface-copy-fix",
  "approvalType": "local-source-surface-release-audit-correction-dual-control",
  "correctionEventId": "asset-visual-local-source-surface-release-audit-correction-us-data-center-grid-node-asset-map-request-surface-copy-fix",
  "correctionDigest": "624d07f5a91b7189e447bc8c5c5eb11b95376bd47c46d250e1d3e3c5d7936ab6",
  "targetAuditLogId": "asset-visual-local-source-surface-release-action-audit-us-data-center-grid-node-asset-map-request-surface-copy-fix",
  "targetAuditDigest": "28f1b897b1467831d14a93636b0507e17b30381ce54571622d8cdc0a6d116ce6",
  "targetRollbackPackageId": "asset-visual-local-source-surface-release-rollback-us-data-center-grid-node-asset-map-request-surface-copy-fix",
  "targetRollbackDigest": "bb92b74ca0773ae292cba5d7108f6225d762c426d40ab32526b6d2df06aa27e6",
  "actionDigest": "ab32f9ea2f7a10d9cc72e64144f877708cc22864b5b125de4448bd2c9c4cdcad",
  "releaseDigest": "e40fb96ce865023984dd99fd4dc1ff750b18545b57b3e2c2939208f18af6aad7",
  "sourceManifestDigest": "f15b2620b536ffe3946e05d6600ed6d4c620d244726ef1887e646ea4ca020472",
  "correctionType": "metadata-correction",
  "consumer": "asset-map",
  "surface": "asset-map-detail",
  "initiatorRole": "qa",
  "reviewerRole": "qa",
  "secondConfirmRequired": true,
  "samePersonForbidden": true,
  "originalAuditImmutable": true,
  "originalRollbackImmutable": true,
  "createdAt": "2026-07-31T18:33:40.903Z",
  "writeMode": "dry-run-only"
}

{
  "initiatorSlot": "local-source-correction-initiator",
  "reviewerSlot": "local-source-correction-reviewer",
  "futureIdentityProvider": "future:ops-sso + local-source-surface-release-actor-snapshot",
  "sessionStorage": "future:httpOnly-session + immutable correction approval snapshot",
  "proofRequiredBeforeWrite": true,
  "approvalWriteDisabled": true,
  "correctionWriteDisabled": true,
  "preserveAuditDigest": true,
  "preserveRollbackDigest": true,
  "noPublicSideEffect": true
}

双签详情 Tx Fix Fix Queue Fix Document 纠错事件回滚包资产详情

双人确认 dry-run 可校验

策略说明 / 美国数据中心 Grid Node

资产地图 / 地图资产详情 / 请求风控复核

Dual JSON

asset_visual_local_source_surface_release_audit_correction_approvalsinitiator=opsreviewer=compliancesamePersonForbidden=truesecondConfirmRequired=true

approvalDigeste1890972c878...4c5bfe

correctionDigest8394659e089f...5f677f

rollbackDigest5a119a445dec...b72c57

Role Matrixops: initiate=true / review=true / 负责发起源图消费面纠错、核对回滚包和运营变更单，但不能绕过双人确认。qa: initiate=false / review=false / 负责 digest、source markers、consumer surface 与只读展示一致性复核。editor: initiate=false / review=false / 负责官网、BBS、AI 脚注和公开文案 redaction 口径复核。compliance: initiate=true / review=true / 负责 redaction、策略阻断、非投资建议和 no-trading 红线。admin: initiate=true / review=true / 可以填任一槽位，但不能绕过同人禁止、原审计不可变、原回滚包不可变和写入禁用。

{
  "table": "asset_visual_local_source_surface_release_audit_correction_approvals",
  "schemaVersion": "2026-07-local-source-surface-release-audit-correction-dual-control-v1",
  "approvalId": "asset-visual-local-source-surface-release-audit-correction-dual-control-us-data-center-grid-node-asset-map-request-risk-review",
  "approvalType": "local-source-surface-release-audit-correction-dual-control",
  "correctionEventId": "asset-visual-local-source-surface-release-audit-correction-us-data-center-grid-node-asset-map-request-risk-review",
  "correctionDigest": "8394659e089f6aaa5098184e08a5e03b84e53bda9e49a5124e15fd27935f677f",
  "targetAuditLogId": "asset-visual-local-source-surface-release-action-audit-us-data-center-grid-node-asset-map-request-risk-review",
  "targetAuditDigest": "979f439b5b7e999c32ae525a475944545120a2250b6c151b8be4b0afcf644b87",
  "targetRollbackPackageId": "asset-visual-local-source-surface-release-rollback-us-data-center-grid-node-asset-map-request-risk-review",
  "targetRollbackDigest": "5a119a445dec3f7db82b59d2ece3c8cee81d3e09a56e973c2891206af0b72c57",
  "actionDigest": "2e9c2cb86cb69d01190d730f878e5c9e8a949ed0fc50ed8754e2b7b0fdab067f",
  "releaseDigest": "e40fb96ce865023984dd99fd4dc1ff750b18545b57b3e2c2939208f18af6aad7",
  "sourceManifestDigest": "f15b2620b536ffe3946e05d6600ed6d4c620d244726ef1887e646ea4ca020472",
  "correctionType": "policy-blocker-note",
  "consumer": "asset-map",
  "surface": "asset-map-detail",
  "initiatorRole": "ops",
  "reviewerRole": "compliance",
  "secondConfirmRequired": true,
  "samePersonForbidden": true,
  "originalAuditImmutable": true,
  "originalRollbackImmutable": true,
  "createdAt": "2026-07-31T18:33:40.903Z",
  "writeMode": "dry-run-only"
}

{
  "initiatorSlot": "local-source-correction-initiator",
  "reviewerSlot": "local-source-correction-reviewer",
  "futureIdentityProvider": "future:ops-sso + local-source-surface-release-actor-snapshot",
  "sessionStorage": "future:httpOnly-session + immutable correction approval snapshot",
  "proofRequiredBeforeWrite": true,
  "approvalWriteDisabled": true,
  "correctionWriteDisabled": true,
  "preserveAuditDigest": true,
  "preserveRollbackDigest": true,
  "noPublicSideEffect": true
}

双签详情 Tx Fix Fix Queue Fix Document 纠错事件回滚包资产详情

双人确认 dry-run 可校验

Redaction 请求 / 美国数据中心 Grid Node

资产地图 / 地图资产详情 / 拒绝发布

Dual JSON

asset_visual_local_source_surface_release_audit_correction_approvalsinitiator=compliancereviewer=compliancesamePersonForbidden=truesecondConfirmRequired=true

approvalDigesta9cfc17dc040...1f8ff7

correctionDigest240499726825...505c64

rollbackDigest7b93bb6d6a56...da51d4

Role Matrixops: initiate=true / review=false / 负责发起源图消费面纠错、核对回滚包和运营变更单，但不能绕过双人确认。qa: initiate=true / review=false / 负责 digest、source markers、consumer surface 与只读展示一致性复核。editor: initiate=true / review=true / 负责官网、BBS、AI 脚注和公开文案 redaction 口径复核。compliance: initiate=true / review=true / 负责 redaction、策略阻断、非投资建议和 no-trading 红线。admin: initiate=true / review=true / 可以填任一槽位，但不能绕过同人禁止、原审计不可变、原回滚包不可变和写入禁用。

{
  "table": "asset_visual_local_source_surface_release_audit_correction_approvals",
  "schemaVersion": "2026-07-local-source-surface-release-audit-correction-dual-control-v1",
  "approvalId": "asset-visual-local-source-surface-release-audit-correction-dual-control-us-data-center-grid-node-asset-map-reject-surface-release",
  "approvalType": "local-source-surface-release-audit-correction-dual-control",
  "correctionEventId": "asset-visual-local-source-surface-release-audit-correction-us-data-center-grid-node-asset-map-reject-surface-release",
  "correctionDigest": "240499726825367ed63f67b4b6918ca1f88ff2603a22a7151957963ca0505c64",
  "targetAuditLogId": "asset-visual-local-source-surface-release-action-audit-us-data-center-grid-node-asset-map-reject-surface-release",
  "targetAuditDigest": "f3c59360807b0aeac1162a8975069b858d84696eb964314caf49cecc6ec29d5c",
  "targetRollbackPackageId": "asset-visual-local-source-surface-release-rollback-us-data-center-grid-node-asset-map-reject-surface-release",
  "targetRollbackDigest": "7b93bb6d6a56c60a2065b4a14e3d9e4f6dd8d2e5e78de93e17fe873eceda51d4",
  "actionDigest": "4f7dafc8a8e97e55f7eb81717ba78f61a64f4e01cb3e84d9e05900c41bbb6998",
  "releaseDigest": "e40fb96ce865023984dd99fd4dc1ff750b18545b57b3e2c2939208f18af6aad7",
  "sourceManifestDigest": "f15b2620b536ffe3946e05d6600ed6d4c620d244726ef1887e646ea4ca020472",
  "correctionType": "redaction-request",
  "consumer": "asset-map",
  "surface": "asset-map-detail",
  "initiatorRole": "compliance",
  "reviewerRole": "compliance",
  "secondConfirmRequired": true,
  "samePersonForbidden": true,
  "originalAuditImmutable": true,
  "originalRollbackImmutable": true,
  "createdAt": "2026-07-31T18:33:40.903Z",
  "writeMode": "dry-run-only"
}

{
  "initiatorSlot": "local-source-correction-initiator",
  "reviewerSlot": "local-source-correction-reviewer",
  "futureIdentityProvider": "future:ops-sso + local-source-surface-release-actor-snapshot",
  "sessionStorage": "future:httpOnly-session + immutable correction approval snapshot",
  "proofRequiredBeforeWrite": true,
  "approvalWriteDisabled": true,
  "correctionWriteDisabled": true,
  "preserveAuditDigest": true,
  "preserveRollbackDigest": true,
  "noPublicSideEffect": true
}