Architecture Cut 72 / Local Source Correction Dual Control

源图审计纠错双人确认 Dry-run

为源图发布审计 correction 事件生成双人确认 schema、角色矩阵、同人禁止和 approvalDigest。当前只读预演：approvalWritten=false，correctionEventWritten=false，auditLogMutated=false，rollbackPackageMutated=false。

Dual JSON 纠错事件纠错事务 MCP Queue MCP Document Citation Lookup 回滚包 BBS 双签范式

4双签 schema

4可校验

4同人禁止

4Approval 禁写

4approvalDigest

0实际写入

Dual Control Approval

发起人与复核人门禁

当前展示单资产/小范围双签详情。

双人确认 dry-run 可校验

元数据纠错 / 美国数据中心 Grid Node

运营台 / 运营台人审 / 批准发布 dry-run

Dual JSON

asset_visual_local_source_surface_release_audit_correction_approvalsinitiator=qareviewer=opssamePersonForbidden=truesecondConfirmRequired=true

approvalDigesta76e5c90eb03...f8dae5

correctionDigest742d57d745b4...9485ca

rollbackDigest085eaac0c552...c81fe6

dualControlDryRun=truedualControlWriteDisabled=trueapprovalWritten=falsecorrectionEventWritten=falseauditLogMutated=falserollbackPackageMutated=falsesessionCreated=falsemcpIndexWritten=falsetradingUseDisabled=true

Role Matrixops: initiate=true / review=true / 负责发起源图消费面纠错、核对回滚包和运营变更单，但不能绕过双人确认。qa: initiate=true / review=true / 负责 digest、source markers、consumer surface 与只读展示一致性复核。editor: initiate=true / review=true / 负责官网、BBS、AI 脚注和公开文案 redaction 口径复核。compliance: initiate=false / review=false / 负责 redaction、策略阻断、非投资建议和 no-trading 红线。admin: initiate=true / review=true / 可以填任一槽位，但不能绕过同人禁止、原审计不可变、原回滚包不可变和写入禁用。

{
  "table": "asset_visual_local_source_surface_release_audit_correction_approvals",
  "schemaVersion": "2026-07-local-source-surface-release-audit-correction-dual-control-v1",
  "approvalId": "asset-visual-local-source-surface-release-audit-correction-dual-control-us-data-center-grid-node-ops-console-approve-surface-release-dry-run",
  "approvalType": "local-source-surface-release-audit-correction-dual-control",
  "correctionEventId": "asset-visual-local-source-surface-release-audit-correction-us-data-center-grid-node-ops-console-approve-surface-release-dry-run",
  "correctionDigest": "742d57d745b4ecaed352a7d6cd472ffaa103d84678c2e3443d56de5e999485ca",
  "targetAuditLogId": "asset-visual-local-source-surface-release-action-audit-us-data-center-grid-node-ops-console-approve-surface-release-dry-run",
  "targetAuditDigest": "8238c87e7dda269879a60e9a851061e6be4b1e14f54303d0150b817de810d03e",
  "targetRollbackPackageId": "asset-visual-local-source-surface-release-rollback-us-data-center-grid-node-ops-console-approve-surface-release-dry-run",
  "targetRollbackDigest": "085eaac0c552f74acd2b600d44fc7adb901b56b39b95cb9e7d66cc983ec81fe6",
  "actionDigest": "ff53d75b32d46f81e83c33782ade482ecddb77443662f3f2804f449b4176f81c",
  "releaseDigest": "32abb01535e706cf421434341c1632a79883e275e5e81b1ef55d6f849ac1881d",
  "sourceManifestDigest": "f15b2620b536ffe3946e05d6600ed6d4c620d244726ef1887e646ea4ca020472",
  "correctionType": "metadata-correction",
  "consumer": "ops-console",
  "surface": "ops-console",
  "initiatorRole": "qa",
  "reviewerRole": "ops",
  "secondConfirmRequired": true,
  "samePersonForbidden": true,
  "originalAuditImmutable": true,
  "originalRollbackImmutable": true,
  "createdAt": "2026-07-31T18:33:40.903Z",
  "writeMode": "dry-run-only"
}

{
  "initiatorSlot": "local-source-correction-initiator",
  "reviewerSlot": "local-source-correction-reviewer",
  "futureIdentityProvider": "future:ops-sso + local-source-surface-release-actor-snapshot",
  "sessionStorage": "future:httpOnly-session + immutable correction approval snapshot",
  "proofRequiredBeforeWrite": true,
  "approvalWriteDisabled": true,
  "correctionWriteDisabled": true,
  "preserveAuditDigest": true,
  "preserveRollbackDigest": true,
  "noPublicSideEffect": true
}

双签详情 Tx Fix Fix Queue Fix Document 纠错事件回滚包资产详情

双人确认 dry-run 可校验

元数据纠错 / 美国数据中心 Grid Node

运营台 / 运营台人审 / 请求文案修复

Dual JSON

asset_visual_local_source_surface_release_audit_correction_approvalsinitiator=qareviewer=opssamePersonForbidden=truesecondConfirmRequired=true

approvalDigest726a96dd9375...a52aac

correctionDigest7fae9c320b1f...3cb068

rollbackDigest7a99ae097ec1...55806b

{
  "table": "asset_visual_local_source_surface_release_audit_correction_approvals",
  "schemaVersion": "2026-07-local-source-surface-release-audit-correction-dual-control-v1",
  "approvalId": "asset-visual-local-source-surface-release-audit-correction-dual-control-us-data-center-grid-node-ops-console-request-surface-copy-fix",
  "approvalType": "local-source-surface-release-audit-correction-dual-control",
  "correctionEventId": "asset-visual-local-source-surface-release-audit-correction-us-data-center-grid-node-ops-console-request-surface-copy-fix",
  "correctionDigest": "7fae9c320b1f8cea19f91abccc611a19e2c55a9c8164fc0f4464ab155e3cb068",
  "targetAuditLogId": "asset-visual-local-source-surface-release-action-audit-us-data-center-grid-node-ops-console-request-surface-copy-fix",
  "targetAuditDigest": "613645fa807f5a0c25b916e8d9d3ac51ae54615710ea819ceeb43ae0e0e5aa9f",
  "targetRollbackPackageId": "asset-visual-local-source-surface-release-rollback-us-data-center-grid-node-ops-console-request-surface-copy-fix",
  "targetRollbackDigest": "7a99ae097ec17238f7b915e653b9207f9f1a2b58740635ad5e62402f6b55806b",
  "actionDigest": "15251d88ca61ddc47e7b15e2314a9a31ce7cd411f844c4e4d7ffa9eb22bcf001",
  "releaseDigest": "32abb01535e706cf421434341c1632a79883e275e5e81b1ef55d6f849ac1881d",
  "sourceManifestDigest": "f15b2620b536ffe3946e05d6600ed6d4c620d244726ef1887e646ea4ca020472",
  "correctionType": "metadata-correction",
  "consumer": "ops-console",
  "surface": "ops-console",
  "initiatorRole": "qa",
  "reviewerRole": "ops",
  "secondConfirmRequired": true,
  "samePersonForbidden": true,
  "originalAuditImmutable": true,
  "originalRollbackImmutable": true,
  "createdAt": "2026-07-31T18:33:40.903Z",
  "writeMode": "dry-run-only"
}

{
  "initiatorSlot": "local-source-correction-initiator",
  "reviewerSlot": "local-source-correction-reviewer",
  "futureIdentityProvider": "future:ops-sso + local-source-surface-release-actor-snapshot",
  "sessionStorage": "future:httpOnly-session + immutable correction approval snapshot",
  "proofRequiredBeforeWrite": true,
  "approvalWriteDisabled": true,
  "correctionWriteDisabled": true,
  "preserveAuditDigest": true,
  "preserveRollbackDigest": true,
  "noPublicSideEffect": true
}

双签详情 Tx Fix Fix Queue Fix Document 纠错事件回滚包资产详情

双人确认 dry-run 可校验

策略说明 / 美国数据中心 Grid Node

运营台 / 运营台人审 / 请求风控复核

Dual JSON

asset_visual_local_source_surface_release_audit_correction_approvalsinitiator=opsreviewer=compliancesamePersonForbidden=truesecondConfirmRequired=true

approvalDigestab8d844de6f3...dfbd6e

correctionDigest664318331c7e...1475f5

rollbackDigestcc2e6e49172e...952524

Role Matrixops: initiate=true / review=true / 负责发起源图消费面纠错、核对回滚包和运营变更单，但不能绕过双人确认。qa: initiate=false / review=false / 负责 digest、source markers、consumer surface 与只读展示一致性复核。editor: initiate=false / review=false / 负责官网、BBS、AI 脚注和公开文案 redaction 口径复核。compliance: initiate=true / review=true / 负责 redaction、策略阻断、非投资建议和 no-trading 红线。admin: initiate=true / review=true / 可以填任一槽位，但不能绕过同人禁止、原审计不可变、原回滚包不可变和写入禁用。

{
  "table": "asset_visual_local_source_surface_release_audit_correction_approvals",
  "schemaVersion": "2026-07-local-source-surface-release-audit-correction-dual-control-v1",
  "approvalId": "asset-visual-local-source-surface-release-audit-correction-dual-control-us-data-center-grid-node-ops-console-request-risk-review",
  "approvalType": "local-source-surface-release-audit-correction-dual-control",
  "correctionEventId": "asset-visual-local-source-surface-release-audit-correction-us-data-center-grid-node-ops-console-request-risk-review",
  "correctionDigest": "664318331c7e9a76916ef63378041aa4bc22cc1cf6164ad2f574821df61475f5",
  "targetAuditLogId": "asset-visual-local-source-surface-release-action-audit-us-data-center-grid-node-ops-console-request-risk-review",
  "targetAuditDigest": "a07bce691bda35e1b4e745a8c9a6e5af185c98fdab5305b1951d1d1a5b5008fd",
  "targetRollbackPackageId": "asset-visual-local-source-surface-release-rollback-us-data-center-grid-node-ops-console-request-risk-review",
  "targetRollbackDigest": "cc2e6e49172e483d86902a0d0ddb3ebcc3f4b5596fb712a3ff4a2d5ec2952524",
  "actionDigest": "6a9f44194232dffb07806a162ed17b33ec7410bb36be4ea477a5d854dc903d7a",
  "releaseDigest": "32abb01535e706cf421434341c1632a79883e275e5e81b1ef55d6f849ac1881d",
  "sourceManifestDigest": "f15b2620b536ffe3946e05d6600ed6d4c620d244726ef1887e646ea4ca020472",
  "correctionType": "policy-blocker-note",
  "consumer": "ops-console",
  "surface": "ops-console",
  "initiatorRole": "ops",
  "reviewerRole": "compliance",
  "secondConfirmRequired": true,
  "samePersonForbidden": true,
  "originalAuditImmutable": true,
  "originalRollbackImmutable": true,
  "createdAt": "2026-07-31T18:33:40.903Z",
  "writeMode": "dry-run-only"
}

{
  "initiatorSlot": "local-source-correction-initiator",
  "reviewerSlot": "local-source-correction-reviewer",
  "futureIdentityProvider": "future:ops-sso + local-source-surface-release-actor-snapshot",
  "sessionStorage": "future:httpOnly-session + immutable correction approval snapshot",
  "proofRequiredBeforeWrite": true,
  "approvalWriteDisabled": true,
  "correctionWriteDisabled": true,
  "preserveAuditDigest": true,
  "preserveRollbackDigest": true,
  "noPublicSideEffect": true
}

双签详情 Tx Fix Fix Queue Fix Document 纠错事件回滚包资产详情

双人确认 dry-run 可校验

Redaction 请求 / 美国数据中心 Grid Node

运营台 / 运营台人审 / 拒绝发布

Dual JSON

asset_visual_local_source_surface_release_audit_correction_approvalsinitiator=compliancereviewer=compliancesamePersonForbidden=truesecondConfirmRequired=true

approvalDigest7c280756b8f8...a87148

correctionDigest92032794ef47...f0ecd9

rollbackDigest04cf877134db...467b13

Role Matrixops: initiate=true / review=false / 负责发起源图消费面纠错、核对回滚包和运营变更单，但不能绕过双人确认。qa: initiate=true / review=false / 负责 digest、source markers、consumer surface 与只读展示一致性复核。editor: initiate=true / review=true / 负责官网、BBS、AI 脚注和公开文案 redaction 口径复核。compliance: initiate=true / review=true / 负责 redaction、策略阻断、非投资建议和 no-trading 红线。admin: initiate=true / review=true / 可以填任一槽位，但不能绕过同人禁止、原审计不可变、原回滚包不可变和写入禁用。

{
  "table": "asset_visual_local_source_surface_release_audit_correction_approvals",
  "schemaVersion": "2026-07-local-source-surface-release-audit-correction-dual-control-v1",
  "approvalId": "asset-visual-local-source-surface-release-audit-correction-dual-control-us-data-center-grid-node-ops-console-reject-surface-release",
  "approvalType": "local-source-surface-release-audit-correction-dual-control",
  "correctionEventId": "asset-visual-local-source-surface-release-audit-correction-us-data-center-grid-node-ops-console-reject-surface-release",
  "correctionDigest": "92032794ef476feff8286177dea572b67af49129c4dd5fea33c09ff014f0ecd9",
  "targetAuditLogId": "asset-visual-local-source-surface-release-action-audit-us-data-center-grid-node-ops-console-reject-surface-release",
  "targetAuditDigest": "13aefb4087ae7fc7b7b96567017275307fde823c481170d9310c09f01eda4c5c",
  "targetRollbackPackageId": "asset-visual-local-source-surface-release-rollback-us-data-center-grid-node-ops-console-reject-surface-release",
  "targetRollbackDigest": "04cf877134dbe694ac047e124cc899380bab08cdeae19f3914ca59858a467b13",
  "actionDigest": "4c972e85b4b9a2fd2fd85e28f6f53ed78e4231fffb35e6c112e586f3bb48c645",
  "releaseDigest": "32abb01535e706cf421434341c1632a79883e275e5e81b1ef55d6f849ac1881d",
  "sourceManifestDigest": "f15b2620b536ffe3946e05d6600ed6d4c620d244726ef1887e646ea4ca020472",
  "correctionType": "redaction-request",
  "consumer": "ops-console",
  "surface": "ops-console",
  "initiatorRole": "compliance",
  "reviewerRole": "compliance",
  "secondConfirmRequired": true,
  "samePersonForbidden": true,
  "originalAuditImmutable": true,
  "originalRollbackImmutable": true,
  "createdAt": "2026-07-31T18:33:40.903Z",
  "writeMode": "dry-run-only"
}

{
  "initiatorSlot": "local-source-correction-initiator",
  "reviewerSlot": "local-source-correction-reviewer",
  "futureIdentityProvider": "future:ops-sso + local-source-surface-release-actor-snapshot",
  "sessionStorage": "future:httpOnly-session + immutable correction approval snapshot",
  "proofRequiredBeforeWrite": true,
  "approvalWriteDisabled": true,
  "correctionWriteDisabled": true,
  "preserveAuditDigest": true,
  "preserveRollbackDigest": true,
  "noPublicSideEffect": true
}