Architecture Cut 72 / Local Source Correction Dual Control

源图审计纠错双人确认 Dry-run

为源图发布审计 correction 事件生成双人确认 schema、角色矩阵、同人禁止和 approvalDigest。当前只读预演：approvalWritten=false，correctionEventWritten=false，auditLogMutated=false，rollbackPackageMutated=false。

Dual JSON 纠错事件纠错事务 MCP Queue MCP Document Citation Lookup 回滚包 BBS 双签范式

4双签 schema

4可校验

4同人禁止

4Approval 禁写

4approvalDigest

0实际写入

Dual Control Approval

发起人与复核人门禁

当前展示单资产/小范围双签详情。

双人确认 dry-run 可校验

元数据纠错 / 美国数据中心 Grid Node

资产地图 / 地图资产详情 / 批准发布 dry-run

Dual JSON

asset_visual_local_source_surface_release_audit_correction_approvalsinitiator=qareviewer=qasamePersonForbidden=truesecondConfirmRequired=true

approvalDigestcbfec712f8d2...5fe42e

correctionDigest51b699d54f7f...3f3ecc

rollbackDigestc4cb2b5e2f64...63d0c5

dualControlDryRun=truedualControlWriteDisabled=trueapprovalWritten=falsecorrectionEventWritten=falseauditLogMutated=falserollbackPackageMutated=falsesessionCreated=falsemcpIndexWritten=falsetradingUseDisabled=true

Role Matrixops: initiate=true / review=true / 负责发起源图消费面纠错、核对回滚包和运营变更单，但不能绕过双人确认。qa: initiate=true / review=true / 负责 digest、source markers、consumer surface 与只读展示一致性复核。editor: initiate=true / review=true / 负责官网、BBS、AI 脚注和公开文案 redaction 口径复核。compliance: initiate=false / review=false / 负责 redaction、策略阻断、非投资建议和 no-trading 红线。admin: initiate=true / review=true / 可以填任一槽位，但不能绕过同人禁止、原审计不可变、原回滚包不可变和写入禁用。

{
  "table": "asset_visual_local_source_surface_release_audit_correction_approvals",
  "schemaVersion": "2026-07-local-source-surface-release-audit-correction-dual-control-v1",
  "approvalId": "asset-visual-local-source-surface-release-audit-correction-dual-control-us-data-center-grid-node-asset-map-approve-surface-release-dry-run",
  "approvalType": "local-source-surface-release-audit-correction-dual-control",
  "correctionEventId": "asset-visual-local-source-surface-release-audit-correction-us-data-center-grid-node-asset-map-approve-surface-release-dry-run",
  "correctionDigest": "51b699d54f7f045afd1022b903d6cf65083852d1d30fac30f83175fa413f3ecc",
  "targetAuditLogId": "asset-visual-local-source-surface-release-action-audit-us-data-center-grid-node-asset-map-approve-surface-release-dry-run",
  "targetAuditDigest": "f9727ccde0caf19375f4e86644d08d940db96031d29951f672345b4b12f2db31",
  "targetRollbackPackageId": "asset-visual-local-source-surface-release-rollback-us-data-center-grid-node-asset-map-approve-surface-release-dry-run",
  "targetRollbackDigest": "c4cb2b5e2f6493ef3b9eedb3bb0ac77d0b4f9353407d7299a0be49e21b63d0c5",
  "actionDigest": "2c15e0ea52b88fb5d84ee04c89802817e1120adf3a4d64ae12c103936ea3098f",
  "releaseDigest": "c73407314cf28b88338c30e2025f93cfb003917a331bdcf9d21145c2c70e6cca",
  "sourceManifestDigest": "81ddf56bb9efb894dfa127aaebf4e38e6da9d8bed47ff1951d49f6ee453547c4",
  "correctionType": "metadata-correction",
  "consumer": "asset-map",
  "surface": "asset-map-detail",
  "initiatorRole": "qa",
  "reviewerRole": "qa",
  "secondConfirmRequired": true,
  "samePersonForbidden": true,
  "originalAuditImmutable": true,
  "originalRollbackImmutable": true,
  "createdAt": "2026-07-31T18:33:40.903Z",
  "writeMode": "dry-run-only"
}

{
  "initiatorSlot": "local-source-correction-initiator",
  "reviewerSlot": "local-source-correction-reviewer",
  "futureIdentityProvider": "future:ops-sso + local-source-surface-release-actor-snapshot",
  "sessionStorage": "future:httpOnly-session + immutable correction approval snapshot",
  "proofRequiredBeforeWrite": true,
  "approvalWriteDisabled": true,
  "correctionWriteDisabled": true,
  "preserveAuditDigest": true,
  "preserveRollbackDigest": true,
  "noPublicSideEffect": true
}

双签详情 Tx Fix Fix Queue Fix Document 纠错事件回滚包资产详情

双人确认 dry-run 可校验

元数据纠错 / 美国数据中心 Grid Node

资产地图 / 地图资产详情 / 请求文案修复

Dual JSON

asset_visual_local_source_surface_release_audit_correction_approvalsinitiator=qareviewer=qasamePersonForbidden=truesecondConfirmRequired=true

approvalDigest886f5c8cd6c7...3a1fb2

correctionDigest363471672168...a6c945

rollbackDigest974aea80d8ec...08fdda

{
  "table": "asset_visual_local_source_surface_release_audit_correction_approvals",
  "schemaVersion": "2026-07-local-source-surface-release-audit-correction-dual-control-v1",
  "approvalId": "asset-visual-local-source-surface-release-audit-correction-dual-control-us-data-center-grid-node-asset-map-request-surface-copy-fix",
  "approvalType": "local-source-surface-release-audit-correction-dual-control",
  "correctionEventId": "asset-visual-local-source-surface-release-audit-correction-us-data-center-grid-node-asset-map-request-surface-copy-fix",
  "correctionDigest": "36347167216801f6d0549f1ec118be000851f358e4bb02825bf41d8ae7a6c945",
  "targetAuditLogId": "asset-visual-local-source-surface-release-action-audit-us-data-center-grid-node-asset-map-request-surface-copy-fix",
  "targetAuditDigest": "0ee21db7d9801f6fd718a72fdcc7eaaee48a10033c9e78b5e6d287833b05e520",
  "targetRollbackPackageId": "asset-visual-local-source-surface-release-rollback-us-data-center-grid-node-asset-map-request-surface-copy-fix",
  "targetRollbackDigest": "974aea80d8ec918f57fcf20e43f5c463c91cb803c64b9d2830ff84f30208fdda",
  "actionDigest": "591a7095f0b2c22ebf1b0c333704cc7db5bd925bc6a2eb8698f7474a5673b008",
  "releaseDigest": "c73407314cf28b88338c30e2025f93cfb003917a331bdcf9d21145c2c70e6cca",
  "sourceManifestDigest": "81ddf56bb9efb894dfa127aaebf4e38e6da9d8bed47ff1951d49f6ee453547c4",
  "correctionType": "metadata-correction",
  "consumer": "asset-map",
  "surface": "asset-map-detail",
  "initiatorRole": "qa",
  "reviewerRole": "qa",
  "secondConfirmRequired": true,
  "samePersonForbidden": true,
  "originalAuditImmutable": true,
  "originalRollbackImmutable": true,
  "createdAt": "2026-07-31T18:33:40.903Z",
  "writeMode": "dry-run-only"
}

{
  "initiatorSlot": "local-source-correction-initiator",
  "reviewerSlot": "local-source-correction-reviewer",
  "futureIdentityProvider": "future:ops-sso + local-source-surface-release-actor-snapshot",
  "sessionStorage": "future:httpOnly-session + immutable correction approval snapshot",
  "proofRequiredBeforeWrite": true,
  "approvalWriteDisabled": true,
  "correctionWriteDisabled": true,
  "preserveAuditDigest": true,
  "preserveRollbackDigest": true,
  "noPublicSideEffect": true
}

双签详情 Tx Fix Fix Queue Fix Document 纠错事件回滚包资产详情

双人确认 dry-run 可校验

策略说明 / 美国数据中心 Grid Node

资产地图 / 地图资产详情 / 请求风控复核

Dual JSON

asset_visual_local_source_surface_release_audit_correction_approvalsinitiator=opsreviewer=compliancesamePersonForbidden=truesecondConfirmRequired=true

approvalDigest42096d8267c9...aa729c

correctionDigest3d5a372524a7...104c89

rollbackDigest98bf9394584a...8b4193

Role Matrixops: initiate=true / review=true / 负责发起源图消费面纠错、核对回滚包和运营变更单，但不能绕过双人确认。qa: initiate=false / review=false / 负责 digest、source markers、consumer surface 与只读展示一致性复核。editor: initiate=false / review=false / 负责官网、BBS、AI 脚注和公开文案 redaction 口径复核。compliance: initiate=true / review=true / 负责 redaction、策略阻断、非投资建议和 no-trading 红线。admin: initiate=true / review=true / 可以填任一槽位，但不能绕过同人禁止、原审计不可变、原回滚包不可变和写入禁用。

{
  "table": "asset_visual_local_source_surface_release_audit_correction_approvals",
  "schemaVersion": "2026-07-local-source-surface-release-audit-correction-dual-control-v1",
  "approvalId": "asset-visual-local-source-surface-release-audit-correction-dual-control-us-data-center-grid-node-asset-map-request-risk-review",
  "approvalType": "local-source-surface-release-audit-correction-dual-control",
  "correctionEventId": "asset-visual-local-source-surface-release-audit-correction-us-data-center-grid-node-asset-map-request-risk-review",
  "correctionDigest": "3d5a372524a7dce4393f2e10086c94c3b7bde7910dbb8035f557d4e374104c89",
  "targetAuditLogId": "asset-visual-local-source-surface-release-action-audit-us-data-center-grid-node-asset-map-request-risk-review",
  "targetAuditDigest": "1cd05e15cd95c5d242b347c94e4328b856d7127ac729b9426653fee5cc3cdc5e",
  "targetRollbackPackageId": "asset-visual-local-source-surface-release-rollback-us-data-center-grid-node-asset-map-request-risk-review",
  "targetRollbackDigest": "98bf9394584ade22211c4177b05910a682c83394e9d64a4e45fe93ed638b4193",
  "actionDigest": "87199809cd063b0ca48103ddac4c9405ba43b7fb51b43ddf02e5705ff025a600",
  "releaseDigest": "c73407314cf28b88338c30e2025f93cfb003917a331bdcf9d21145c2c70e6cca",
  "sourceManifestDigest": "81ddf56bb9efb894dfa127aaebf4e38e6da9d8bed47ff1951d49f6ee453547c4",
  "correctionType": "policy-blocker-note",
  "consumer": "asset-map",
  "surface": "asset-map-detail",
  "initiatorRole": "ops",
  "reviewerRole": "compliance",
  "secondConfirmRequired": true,
  "samePersonForbidden": true,
  "originalAuditImmutable": true,
  "originalRollbackImmutable": true,
  "createdAt": "2026-07-31T18:33:40.903Z",
  "writeMode": "dry-run-only"
}

{
  "initiatorSlot": "local-source-correction-initiator",
  "reviewerSlot": "local-source-correction-reviewer",
  "futureIdentityProvider": "future:ops-sso + local-source-surface-release-actor-snapshot",
  "sessionStorage": "future:httpOnly-session + immutable correction approval snapshot",
  "proofRequiredBeforeWrite": true,
  "approvalWriteDisabled": true,
  "correctionWriteDisabled": true,
  "preserveAuditDigest": true,
  "preserveRollbackDigest": true,
  "noPublicSideEffect": true
}

双签详情 Tx Fix Fix Queue Fix Document 纠错事件回滚包资产详情

双人确认 dry-run 可校验

Redaction 请求 / 美国数据中心 Grid Node

资产地图 / 地图资产详情 / 拒绝发布

Dual JSON

asset_visual_local_source_surface_release_audit_correction_approvalsinitiator=compliancereviewer=compliancesamePersonForbidden=truesecondConfirmRequired=true

approvalDigeste8f37ac993ca...9ce0ea

correctionDigest53c457d063e8...53be83

rollbackDigest5b3dff9c0eb4...6e2d45

Role Matrixops: initiate=true / review=false / 负责发起源图消费面纠错、核对回滚包和运营变更单，但不能绕过双人确认。qa: initiate=true / review=false / 负责 digest、source markers、consumer surface 与只读展示一致性复核。editor: initiate=true / review=true / 负责官网、BBS、AI 脚注和公开文案 redaction 口径复核。compliance: initiate=true / review=true / 负责 redaction、策略阻断、非投资建议和 no-trading 红线。admin: initiate=true / review=true / 可以填任一槽位，但不能绕过同人禁止、原审计不可变、原回滚包不可变和写入禁用。

{
  "table": "asset_visual_local_source_surface_release_audit_correction_approvals",
  "schemaVersion": "2026-07-local-source-surface-release-audit-correction-dual-control-v1",
  "approvalId": "asset-visual-local-source-surface-release-audit-correction-dual-control-us-data-center-grid-node-asset-map-reject-surface-release",
  "approvalType": "local-source-surface-release-audit-correction-dual-control",
  "correctionEventId": "asset-visual-local-source-surface-release-audit-correction-us-data-center-grid-node-asset-map-reject-surface-release",
  "correctionDigest": "53c457d063e81a4dce86f21da92325ae1bd7e788001f8c799010b4a07f53be83",
  "targetAuditLogId": "asset-visual-local-source-surface-release-action-audit-us-data-center-grid-node-asset-map-reject-surface-release",
  "targetAuditDigest": "8e6bb84f88d1f955780c2e76525094ba625d5f1dee1143552c2d27dd72ebffcd",
  "targetRollbackPackageId": "asset-visual-local-source-surface-release-rollback-us-data-center-grid-node-asset-map-reject-surface-release",
  "targetRollbackDigest": "5b3dff9c0eb49b508b154e00bff5a3f1ed3b784ccf85c66243b4c578b46e2d45",
  "actionDigest": "93472c697e2833c2fcd7b3f76eb24af60960e6ae3adf32d1affddd8199a0faf6",
  "releaseDigest": "c73407314cf28b88338c30e2025f93cfb003917a331bdcf9d21145c2c70e6cca",
  "sourceManifestDigest": "81ddf56bb9efb894dfa127aaebf4e38e6da9d8bed47ff1951d49f6ee453547c4",
  "correctionType": "redaction-request",
  "consumer": "asset-map",
  "surface": "asset-map-detail",
  "initiatorRole": "compliance",
  "reviewerRole": "compliance",
  "secondConfirmRequired": true,
  "samePersonForbidden": true,
  "originalAuditImmutable": true,
  "originalRollbackImmutable": true,
  "createdAt": "2026-07-31T18:33:40.903Z",
  "writeMode": "dry-run-only"
}

{
  "initiatorSlot": "local-source-correction-initiator",
  "reviewerSlot": "local-source-correction-reviewer",
  "futureIdentityProvider": "future:ops-sso + local-source-surface-release-actor-snapshot",
  "sessionStorage": "future:httpOnly-session + immutable correction approval snapshot",
  "proofRequiredBeforeWrite": true,
  "approvalWriteDisabled": true,
  "correctionWriteDisabled": true,
  "preserveAuditDigest": true,
  "preserveRollbackDigest": true,
  "noPublicSideEffect": true
}