Architecture Cut 72 / Local Source Correction Dual Control

源图审计纠错双人确认 Dry-run

为源图发布审计 correction 事件生成双人确认 schema、角色矩阵、同人禁止和 approvalDigest。当前只读预演：approvalWritten=false，correctionEventWritten=false，auditLogMutated=false，rollbackPackageMutated=false。

Dual JSON 纠错事件纠错事务 MCP Queue MCP Document Citation Lookup 回滚包 BBS 双签范式

4双签 schema

4可校验

4同人禁止

4Approval 禁写

4approvalDigest

0实际写入

Dual Control Approval

发起人与复核人门禁

当前展示单资产/小范围双签详情。

双人确认 dry-run 可校验

元数据纠错 / 美国数据中心 Grid Node

Pixel Atlas / Pixel Atlas 详情 / 批准发布 dry-run

Dual JSON

asset_visual_local_source_surface_release_audit_correction_approvalsinitiator=qareviewer=opssamePersonForbidden=truesecondConfirmRequired=true

approvalDigest8a084c7658e3...3e2efa

correctionDigestf75afc570f57...8c9b16

rollbackDigest6e600ffc3b0c...8fc2c6

dualControlDryRun=truedualControlWriteDisabled=trueapprovalWritten=falsecorrectionEventWritten=falseauditLogMutated=falserollbackPackageMutated=falsesessionCreated=falsemcpIndexWritten=falsetradingUseDisabled=true

Role Matrixops: initiate=true / review=true / 负责发起源图消费面纠错、核对回滚包和运营变更单，但不能绕过双人确认。qa: initiate=true / review=true / 负责 digest、source markers、consumer surface 与只读展示一致性复核。editor: initiate=true / review=true / 负责官网、BBS、AI 脚注和公开文案 redaction 口径复核。compliance: initiate=false / review=false / 负责 redaction、策略阻断、非投资建议和 no-trading 红线。admin: initiate=true / review=true / 可以填任一槽位，但不能绕过同人禁止、原审计不可变、原回滚包不可变和写入禁用。

{
  "table": "asset_visual_local_source_surface_release_audit_correction_approvals",
  "schemaVersion": "2026-07-local-source-surface-release-audit-correction-dual-control-v1",
  "approvalId": "asset-visual-local-source-surface-release-audit-correction-dual-control-us-data-center-grid-node-pixel-atlas-approve-surface-release-dry-run",
  "approvalType": "local-source-surface-release-audit-correction-dual-control",
  "correctionEventId": "asset-visual-local-source-surface-release-audit-correction-us-data-center-grid-node-pixel-atlas-approve-surface-release-dry-run",
  "correctionDigest": "f75afc570f5709750cff2412a025269170294f30b846eb533cee4684d08c9b16",
  "targetAuditLogId": "asset-visual-local-source-surface-release-action-audit-us-data-center-grid-node-pixel-atlas-approve-surface-release-dry-run",
  "targetAuditDigest": "9e23d73b0dda9eb05b8df2ab81b37b54ffeb1f6d649bebf9ace80b7c9ce07249",
  "targetRollbackPackageId": "asset-visual-local-source-surface-release-rollback-us-data-center-grid-node-pixel-atlas-approve-surface-release-dry-run",
  "targetRollbackDigest": "6e600ffc3b0cb269ee20ff449cd4b5d85008ef13998101ae49a68d80128fc2c6",
  "actionDigest": "97f0ba7c6fef05f44d7a3d602418a0756a13775c58b9a5f768251e57c4e98147",
  "releaseDigest": "a3265b9210d5d4c85c340948869a4e68229c31194b94494b104b170c395c2343",
  "sourceManifestDigest": "f15b2620b536ffe3946e05d6600ed6d4c620d244726ef1887e646ea4ca020472",
  "correctionType": "metadata-correction",
  "consumer": "pixel-atlas",
  "surface": "pixel-atlas-detail",
  "initiatorRole": "qa",
  "reviewerRole": "ops",
  "secondConfirmRequired": true,
  "samePersonForbidden": true,
  "originalAuditImmutable": true,
  "originalRollbackImmutable": true,
  "createdAt": "2026-07-31T18:33:40.903Z",
  "writeMode": "dry-run-only"
}

{
  "initiatorSlot": "local-source-correction-initiator",
  "reviewerSlot": "local-source-correction-reviewer",
  "futureIdentityProvider": "future:ops-sso + local-source-surface-release-actor-snapshot",
  "sessionStorage": "future:httpOnly-session + immutable correction approval snapshot",
  "proofRequiredBeforeWrite": true,
  "approvalWriteDisabled": true,
  "correctionWriteDisabled": true,
  "preserveAuditDigest": true,
  "preserveRollbackDigest": true,
  "noPublicSideEffect": true
}

双签详情 Tx Fix Fix Queue Fix Document 纠错事件回滚包资产详情

双人确认 dry-run 可校验

元数据纠错 / 美国数据中心 Grid Node

Pixel Atlas / Pixel Atlas 详情 / 请求文案修复

Dual JSON

asset_visual_local_source_surface_release_audit_correction_approvalsinitiator=qareviewer=opssamePersonForbidden=truesecondConfirmRequired=true

approvalDigest1f181d53cfad...d9a87f

correctionDigest2fab218d7fb7...6ad7e3

rollbackDigest79b569d7f078...7ed78a

{
  "table": "asset_visual_local_source_surface_release_audit_correction_approvals",
  "schemaVersion": "2026-07-local-source-surface-release-audit-correction-dual-control-v1",
  "approvalId": "asset-visual-local-source-surface-release-audit-correction-dual-control-us-data-center-grid-node-pixel-atlas-request-surface-copy-fix",
  "approvalType": "local-source-surface-release-audit-correction-dual-control",
  "correctionEventId": "asset-visual-local-source-surface-release-audit-correction-us-data-center-grid-node-pixel-atlas-request-surface-copy-fix",
  "correctionDigest": "2fab218d7fb792034684cacd44e881e1fc037ecdf5d4c5a44f526cfb746ad7e3",
  "targetAuditLogId": "asset-visual-local-source-surface-release-action-audit-us-data-center-grid-node-pixel-atlas-request-surface-copy-fix",
  "targetAuditDigest": "d6709acdd1a12d071d435b3e738cd3b506d6ab38299fc2ac31efd870f1d46423",
  "targetRollbackPackageId": "asset-visual-local-source-surface-release-rollback-us-data-center-grid-node-pixel-atlas-request-surface-copy-fix",
  "targetRollbackDigest": "79b569d7f078762d158faa51afce73c56197ed719e02653fd4a510e7057ed78a",
  "actionDigest": "c7fd8d88336034ff70d1055870c055c07b225c8f1b69f61277bde328370514cb",
  "releaseDigest": "a3265b9210d5d4c85c340948869a4e68229c31194b94494b104b170c395c2343",
  "sourceManifestDigest": "f15b2620b536ffe3946e05d6600ed6d4c620d244726ef1887e646ea4ca020472",
  "correctionType": "metadata-correction",
  "consumer": "pixel-atlas",
  "surface": "pixel-atlas-detail",
  "initiatorRole": "qa",
  "reviewerRole": "ops",
  "secondConfirmRequired": true,
  "samePersonForbidden": true,
  "originalAuditImmutable": true,
  "originalRollbackImmutable": true,
  "createdAt": "2026-07-31T18:33:40.903Z",
  "writeMode": "dry-run-only"
}

{
  "initiatorSlot": "local-source-correction-initiator",
  "reviewerSlot": "local-source-correction-reviewer",
  "futureIdentityProvider": "future:ops-sso + local-source-surface-release-actor-snapshot",
  "sessionStorage": "future:httpOnly-session + immutable correction approval snapshot",
  "proofRequiredBeforeWrite": true,
  "approvalWriteDisabled": true,
  "correctionWriteDisabled": true,
  "preserveAuditDigest": true,
  "preserveRollbackDigest": true,
  "noPublicSideEffect": true
}

双签详情 Tx Fix Fix Queue Fix Document 纠错事件回滚包资产详情

双人确认 dry-run 可校验

策略说明 / 美国数据中心 Grid Node

Pixel Atlas / Pixel Atlas 详情 / 请求风控复核

Dual JSON

asset_visual_local_source_surface_release_audit_correction_approvalsinitiator=opsreviewer=compliancesamePersonForbidden=truesecondConfirmRequired=true

approvalDigest0e5912d5981d...5e8ce2

correctionDigest2f648d66858a...16b140

rollbackDigestcf871c0ee514...8770cd

Role Matrixops: initiate=true / review=true / 负责发起源图消费面纠错、核对回滚包和运营变更单，但不能绕过双人确认。qa: initiate=false / review=false / 负责 digest、source markers、consumer surface 与只读展示一致性复核。editor: initiate=false / review=false / 负责官网、BBS、AI 脚注和公开文案 redaction 口径复核。compliance: initiate=true / review=true / 负责 redaction、策略阻断、非投资建议和 no-trading 红线。admin: initiate=true / review=true / 可以填任一槽位，但不能绕过同人禁止、原审计不可变、原回滚包不可变和写入禁用。

{
  "table": "asset_visual_local_source_surface_release_audit_correction_approvals",
  "schemaVersion": "2026-07-local-source-surface-release-audit-correction-dual-control-v1",
  "approvalId": "asset-visual-local-source-surface-release-audit-correction-dual-control-us-data-center-grid-node-pixel-atlas-request-risk-review",
  "approvalType": "local-source-surface-release-audit-correction-dual-control",
  "correctionEventId": "asset-visual-local-source-surface-release-audit-correction-us-data-center-grid-node-pixel-atlas-request-risk-review",
  "correctionDigest": "2f648d66858a4e830fd4a9bf7d5926d009fb6eb0b31b4d16bf584379fd16b140",
  "targetAuditLogId": "asset-visual-local-source-surface-release-action-audit-us-data-center-grid-node-pixel-atlas-request-risk-review",
  "targetAuditDigest": "752c6a0fcb75343ec3667e2d5925c4c408af724615968b0919a40887e8da2554",
  "targetRollbackPackageId": "asset-visual-local-source-surface-release-rollback-us-data-center-grid-node-pixel-atlas-request-risk-review",
  "targetRollbackDigest": "cf871c0ee514de2da97846df3f389f6873da4838e3d4d7198196abdaf78770cd",
  "actionDigest": "2b33118bc7f9f64c46d0ab07a2bcd528024ae07dbe32b4d44e914e8757e97ee7",
  "releaseDigest": "a3265b9210d5d4c85c340948869a4e68229c31194b94494b104b170c395c2343",
  "sourceManifestDigest": "f15b2620b536ffe3946e05d6600ed6d4c620d244726ef1887e646ea4ca020472",
  "correctionType": "policy-blocker-note",
  "consumer": "pixel-atlas",
  "surface": "pixel-atlas-detail",
  "initiatorRole": "ops",
  "reviewerRole": "compliance",
  "secondConfirmRequired": true,
  "samePersonForbidden": true,
  "originalAuditImmutable": true,
  "originalRollbackImmutable": true,
  "createdAt": "2026-07-31T18:33:40.903Z",
  "writeMode": "dry-run-only"
}

{
  "initiatorSlot": "local-source-correction-initiator",
  "reviewerSlot": "local-source-correction-reviewer",
  "futureIdentityProvider": "future:ops-sso + local-source-surface-release-actor-snapshot",
  "sessionStorage": "future:httpOnly-session + immutable correction approval snapshot",
  "proofRequiredBeforeWrite": true,
  "approvalWriteDisabled": true,
  "correctionWriteDisabled": true,
  "preserveAuditDigest": true,
  "preserveRollbackDigest": true,
  "noPublicSideEffect": true
}

双签详情 Tx Fix Fix Queue Fix Document 纠错事件回滚包资产详情

双人确认 dry-run 可校验

Redaction 请求 / 美国数据中心 Grid Node

Pixel Atlas / Pixel Atlas 详情 / 拒绝发布

Dual JSON

asset_visual_local_source_surface_release_audit_correction_approvalsinitiator=compliancereviewer=compliancesamePersonForbidden=truesecondConfirmRequired=true

approvalDigestdb781c069195...63fc19

correctionDigestb0e62fbbf8c1...54d9c4

rollbackDigest55996bd416b3...cb732c

Role Matrixops: initiate=true / review=false / 负责发起源图消费面纠错、核对回滚包和运营变更单，但不能绕过双人确认。qa: initiate=true / review=false / 负责 digest、source markers、consumer surface 与只读展示一致性复核。editor: initiate=true / review=true / 负责官网、BBS、AI 脚注和公开文案 redaction 口径复核。compliance: initiate=true / review=true / 负责 redaction、策略阻断、非投资建议和 no-trading 红线。admin: initiate=true / review=true / 可以填任一槽位，但不能绕过同人禁止、原审计不可变、原回滚包不可变和写入禁用。

{
  "table": "asset_visual_local_source_surface_release_audit_correction_approvals",
  "schemaVersion": "2026-07-local-source-surface-release-audit-correction-dual-control-v1",
  "approvalId": "asset-visual-local-source-surface-release-audit-correction-dual-control-us-data-center-grid-node-pixel-atlas-reject-surface-release",
  "approvalType": "local-source-surface-release-audit-correction-dual-control",
  "correctionEventId": "asset-visual-local-source-surface-release-audit-correction-us-data-center-grid-node-pixel-atlas-reject-surface-release",
  "correctionDigest": "b0e62fbbf8c1ef4d1e82d1001db3f735bb2ddcc104b57488f33022713954d9c4",
  "targetAuditLogId": "asset-visual-local-source-surface-release-action-audit-us-data-center-grid-node-pixel-atlas-reject-surface-release",
  "targetAuditDigest": "54d32788130577e433546ffcda104d10c1d6b72862b77be8fa88c492b7040f10",
  "targetRollbackPackageId": "asset-visual-local-source-surface-release-rollback-us-data-center-grid-node-pixel-atlas-reject-surface-release",
  "targetRollbackDigest": "55996bd416b3f843be74425296e98bad352968a946a6ac16e0b237f4b1cb732c",
  "actionDigest": "35a12dc6cd1957e03cfa46714e3cc4540f64ddd2fc1bfd43cc6143acba835826",
  "releaseDigest": "a3265b9210d5d4c85c340948869a4e68229c31194b94494b104b170c395c2343",
  "sourceManifestDigest": "f15b2620b536ffe3946e05d6600ed6d4c620d244726ef1887e646ea4ca020472",
  "correctionType": "redaction-request",
  "consumer": "pixel-atlas",
  "surface": "pixel-atlas-detail",
  "initiatorRole": "compliance",
  "reviewerRole": "compliance",
  "secondConfirmRequired": true,
  "samePersonForbidden": true,
  "originalAuditImmutable": true,
  "originalRollbackImmutable": true,
  "createdAt": "2026-07-31T18:33:40.903Z",
  "writeMode": "dry-run-only"
}

{
  "initiatorSlot": "local-source-correction-initiator",
  "reviewerSlot": "local-source-correction-reviewer",
  "futureIdentityProvider": "future:ops-sso + local-source-surface-release-actor-snapshot",
  "sessionStorage": "future:httpOnly-session + immutable correction approval snapshot",
  "proofRequiredBeforeWrite": true,
  "approvalWriteDisabled": true,
  "correctionWriteDisabled": true,
  "preserveAuditDigest": true,
  "preserveRollbackDigest": true,
  "noPublicSideEffect": true
}