Architecture Cut 72 / Local Source Correction Dual Control

源图审计纠错双人确认 Dry-run

为源图发布审计 correction 事件生成双人确认 schema、角色矩阵、同人禁止和 approvalDigest。当前只读预演：approvalWritten=false，correctionEventWritten=false，auditLogMutated=false，rollbackPackageMutated=false。

Dual JSON 纠错事件纠错事务 MCP Queue MCP Document Citation Lookup 回滚包 BBS 双签范式

4双签 schema

4可校验

4同人禁止

4Approval 禁写

4approvalDigest

0实际写入

Dual Control Approval

发起人与复核人门禁

当前展示单资产/小范围双签详情。

双人确认 dry-run 可校验

元数据纠错 / 新加坡 S-REIT Harbor Block

运营台 / 运营台人审 / 批准发布 dry-run

Dual JSON

asset_visual_local_source_surface_release_audit_correction_approvalsinitiator=qareviewer=opssamePersonForbidden=truesecondConfirmRequired=true

approvalDigest80d86b3ee185...7ae5f0

correctionDigestbc3cad5b6c46...e1d4c8

rollbackDigestb3c2f1c44b09...6cba39

dualControlDryRun=truedualControlWriteDisabled=trueapprovalWritten=falsecorrectionEventWritten=falseauditLogMutated=falserollbackPackageMutated=falsesessionCreated=falsemcpIndexWritten=falsetradingUseDisabled=true

Role Matrixops: initiate=true / review=true / 负责发起源图消费面纠错、核对回滚包和运营变更单，但不能绕过双人确认。qa: initiate=true / review=true / 负责 digest、source markers、consumer surface 与只读展示一致性复核。editor: initiate=true / review=true / 负责官网、BBS、AI 脚注和公开文案 redaction 口径复核。compliance: initiate=false / review=false / 负责 redaction、策略阻断、非投资建议和 no-trading 红线。admin: initiate=true / review=true / 可以填任一槽位，但不能绕过同人禁止、原审计不可变、原回滚包不可变和写入禁用。

{
  "table": "asset_visual_local_source_surface_release_audit_correction_approvals",
  "schemaVersion": "2026-07-local-source-surface-release-audit-correction-dual-control-v1",
  "approvalId": "asset-visual-local-source-surface-release-audit-correction-dual-control-sg-commercial-harbor-block-ops-console-approve-surface-release-dry-run",
  "approvalType": "local-source-surface-release-audit-correction-dual-control",
  "correctionEventId": "asset-visual-local-source-surface-release-audit-correction-sg-commercial-harbor-block-ops-console-approve-surface-release-dry-run",
  "correctionDigest": "bc3cad5b6c4677f00c8dfc32b7976ef428d8d513c973674269db288a5ae1d4c8",
  "targetAuditLogId": "asset-visual-local-source-surface-release-action-audit-sg-commercial-harbor-block-ops-console-approve-surface-release-dry-run",
  "targetAuditDigest": "8c42b01951c6159f09bb11953f8c96667de073c3a1caba615d94488ef72cc3e0",
  "targetRollbackPackageId": "asset-visual-local-source-surface-release-rollback-sg-commercial-harbor-block-ops-console-approve-surface-release-dry-run",
  "targetRollbackDigest": "b3c2f1c44b0944b132e6d5ca388a859e791c7edf9ecdd9e987f4de39b16cba39",
  "actionDigest": "3006c2b7529ac944392c9fe5ae537eeee4afe6bc76349e06d96455f249536734",
  "releaseDigest": "81c084f93fb2125e6f5c8271e466deda004eb5c93d0020558e56d9c6e2940cdd",
  "sourceManifestDigest": "e8697bcb7e114031877b80144f6ed05ae2ab204e09d6f55ac7176ed83df0635d",
  "correctionType": "metadata-correction",
  "consumer": "ops-console",
  "surface": "ops-console",
  "initiatorRole": "qa",
  "reviewerRole": "ops",
  "secondConfirmRequired": true,
  "samePersonForbidden": true,
  "originalAuditImmutable": true,
  "originalRollbackImmutable": true,
  "createdAt": "2026-07-31T18:33:40.903Z",
  "writeMode": "dry-run-only"
}

{
  "initiatorSlot": "local-source-correction-initiator",
  "reviewerSlot": "local-source-correction-reviewer",
  "futureIdentityProvider": "future:ops-sso + local-source-surface-release-actor-snapshot",
  "sessionStorage": "future:httpOnly-session + immutable correction approval snapshot",
  "proofRequiredBeforeWrite": true,
  "approvalWriteDisabled": true,
  "correctionWriteDisabled": true,
  "preserveAuditDigest": true,
  "preserveRollbackDigest": true,
  "noPublicSideEffect": true
}

双签详情 Tx Fix Fix Queue Fix Document 纠错事件回滚包资产详情

双人确认 dry-run 可校验

元数据纠错 / 新加坡 S-REIT Harbor Block

运营台 / 运营台人审 / 请求文案修复

Dual JSON

asset_visual_local_source_surface_release_audit_correction_approvalsinitiator=qareviewer=opssamePersonForbidden=truesecondConfirmRequired=true

approvalDigestd4e00d1c946e...db6e4b

correctionDigest5edda7d4bf06...f9da36

rollbackDigestb8a043d37517...047d41

{
  "table": "asset_visual_local_source_surface_release_audit_correction_approvals",
  "schemaVersion": "2026-07-local-source-surface-release-audit-correction-dual-control-v1",
  "approvalId": "asset-visual-local-source-surface-release-audit-correction-dual-control-sg-commercial-harbor-block-ops-console-request-surface-copy-fix",
  "approvalType": "local-source-surface-release-audit-correction-dual-control",
  "correctionEventId": "asset-visual-local-source-surface-release-audit-correction-sg-commercial-harbor-block-ops-console-request-surface-copy-fix",
  "correctionDigest": "5edda7d4bf06a3ea2d845f459db282eb558e45f7d66d01e32f597c24cff9da36",
  "targetAuditLogId": "asset-visual-local-source-surface-release-action-audit-sg-commercial-harbor-block-ops-console-request-surface-copy-fix",
  "targetAuditDigest": "812480bfcf73189fcebf4600183dd3896b697857ff1bed38436b05ad0205ac0e",
  "targetRollbackPackageId": "asset-visual-local-source-surface-release-rollback-sg-commercial-harbor-block-ops-console-request-surface-copy-fix",
  "targetRollbackDigest": "b8a043d375178161ee1889855ff53f623270c5dd2892a4520104698446047d41",
  "actionDigest": "b04b10a830780b2bc67ac3288c9583b9fcbadfaaad1f3053a33cda39da5bab75",
  "releaseDigest": "81c084f93fb2125e6f5c8271e466deda004eb5c93d0020558e56d9c6e2940cdd",
  "sourceManifestDigest": "e8697bcb7e114031877b80144f6ed05ae2ab204e09d6f55ac7176ed83df0635d",
  "correctionType": "metadata-correction",
  "consumer": "ops-console",
  "surface": "ops-console",
  "initiatorRole": "qa",
  "reviewerRole": "ops",
  "secondConfirmRequired": true,
  "samePersonForbidden": true,
  "originalAuditImmutable": true,
  "originalRollbackImmutable": true,
  "createdAt": "2026-07-31T18:33:40.903Z",
  "writeMode": "dry-run-only"
}

{
  "initiatorSlot": "local-source-correction-initiator",
  "reviewerSlot": "local-source-correction-reviewer",
  "futureIdentityProvider": "future:ops-sso + local-source-surface-release-actor-snapshot",
  "sessionStorage": "future:httpOnly-session + immutable correction approval snapshot",
  "proofRequiredBeforeWrite": true,
  "approvalWriteDisabled": true,
  "correctionWriteDisabled": true,
  "preserveAuditDigest": true,
  "preserveRollbackDigest": true,
  "noPublicSideEffect": true
}

双签详情 Tx Fix Fix Queue Fix Document 纠错事件回滚包资产详情

双人确认 dry-run 可校验

策略说明 / 新加坡 S-REIT Harbor Block

运营台 / 运营台人审 / 请求风控复核

Dual JSON

asset_visual_local_source_surface_release_audit_correction_approvalsinitiator=opsreviewer=compliancesamePersonForbidden=truesecondConfirmRequired=true

approvalDigestb46e02449dff...cb9d56

correctionDigest299745ca8c73...1d0311

rollbackDigestd5af3fd30c89...71e117

Role Matrixops: initiate=true / review=true / 负责发起源图消费面纠错、核对回滚包和运营变更单，但不能绕过双人确认。qa: initiate=false / review=false / 负责 digest、source markers、consumer surface 与只读展示一致性复核。editor: initiate=false / review=false / 负责官网、BBS、AI 脚注和公开文案 redaction 口径复核。compliance: initiate=true / review=true / 负责 redaction、策略阻断、非投资建议和 no-trading 红线。admin: initiate=true / review=true / 可以填任一槽位，但不能绕过同人禁止、原审计不可变、原回滚包不可变和写入禁用。

{
  "table": "asset_visual_local_source_surface_release_audit_correction_approvals",
  "schemaVersion": "2026-07-local-source-surface-release-audit-correction-dual-control-v1",
  "approvalId": "asset-visual-local-source-surface-release-audit-correction-dual-control-sg-commercial-harbor-block-ops-console-request-risk-review",
  "approvalType": "local-source-surface-release-audit-correction-dual-control",
  "correctionEventId": "asset-visual-local-source-surface-release-audit-correction-sg-commercial-harbor-block-ops-console-request-risk-review",
  "correctionDigest": "299745ca8c7331bd5036776abf2c70a1d48f7f057c1bc133e6169fda991d0311",
  "targetAuditLogId": "asset-visual-local-source-surface-release-action-audit-sg-commercial-harbor-block-ops-console-request-risk-review",
  "targetAuditDigest": "6f8a219c2de76905ab276bb4fde2f162a113a6a34ab8c56d164430d277b8e1eb",
  "targetRollbackPackageId": "asset-visual-local-source-surface-release-rollback-sg-commercial-harbor-block-ops-console-request-risk-review",
  "targetRollbackDigest": "d5af3fd30c89f3632cdced1178de5ae944a705dd94aa8706dceb7cf00671e117",
  "actionDigest": "bae080d3956827f7e4dfe0bdeead8a27e3fa5f82a5dc598187d2b0a6dc0ea720",
  "releaseDigest": "81c084f93fb2125e6f5c8271e466deda004eb5c93d0020558e56d9c6e2940cdd",
  "sourceManifestDigest": "e8697bcb7e114031877b80144f6ed05ae2ab204e09d6f55ac7176ed83df0635d",
  "correctionType": "policy-blocker-note",
  "consumer": "ops-console",
  "surface": "ops-console",
  "initiatorRole": "ops",
  "reviewerRole": "compliance",
  "secondConfirmRequired": true,
  "samePersonForbidden": true,
  "originalAuditImmutable": true,
  "originalRollbackImmutable": true,
  "createdAt": "2026-07-31T18:33:40.903Z",
  "writeMode": "dry-run-only"
}

{
  "initiatorSlot": "local-source-correction-initiator",
  "reviewerSlot": "local-source-correction-reviewer",
  "futureIdentityProvider": "future:ops-sso + local-source-surface-release-actor-snapshot",
  "sessionStorage": "future:httpOnly-session + immutable correction approval snapshot",
  "proofRequiredBeforeWrite": true,
  "approvalWriteDisabled": true,
  "correctionWriteDisabled": true,
  "preserveAuditDigest": true,
  "preserveRollbackDigest": true,
  "noPublicSideEffect": true
}

双签详情 Tx Fix Fix Queue Fix Document 纠错事件回滚包资产详情

双人确认 dry-run 可校验

Redaction 请求 / 新加坡 S-REIT Harbor Block

运营台 / 运营台人审 / 拒绝发布

Dual JSON

asset_visual_local_source_surface_release_audit_correction_approvalsinitiator=compliancereviewer=compliancesamePersonForbidden=truesecondConfirmRequired=true

approvalDigest35f3bc0262c2...c5c2dd

correctionDigestc953df462a69...99e3ea

rollbackDigest477c2921fa95...ce6906

Role Matrixops: initiate=true / review=false / 负责发起源图消费面纠错、核对回滚包和运营变更单，但不能绕过双人确认。qa: initiate=true / review=false / 负责 digest、source markers、consumer surface 与只读展示一致性复核。editor: initiate=true / review=true / 负责官网、BBS、AI 脚注和公开文案 redaction 口径复核。compliance: initiate=true / review=true / 负责 redaction、策略阻断、非投资建议和 no-trading 红线。admin: initiate=true / review=true / 可以填任一槽位，但不能绕过同人禁止、原审计不可变、原回滚包不可变和写入禁用。

{
  "table": "asset_visual_local_source_surface_release_audit_correction_approvals",
  "schemaVersion": "2026-07-local-source-surface-release-audit-correction-dual-control-v1",
  "approvalId": "asset-visual-local-source-surface-release-audit-correction-dual-control-sg-commercial-harbor-block-ops-console-reject-surface-release",
  "approvalType": "local-source-surface-release-audit-correction-dual-control",
  "correctionEventId": "asset-visual-local-source-surface-release-audit-correction-sg-commercial-harbor-block-ops-console-reject-surface-release",
  "correctionDigest": "c953df462a69d9f6b85b1eb4d2b5bfb1c0a295b132b6c47f5d2faed28499e3ea",
  "targetAuditLogId": "asset-visual-local-source-surface-release-action-audit-sg-commercial-harbor-block-ops-console-reject-surface-release",
  "targetAuditDigest": "2de7df27e96b34d3bf6a059d9c99743e73186d975d12bf5c8231698791ce39b5",
  "targetRollbackPackageId": "asset-visual-local-source-surface-release-rollback-sg-commercial-harbor-block-ops-console-reject-surface-release",
  "targetRollbackDigest": "477c2921fa956b440057736742fae9abffd43f2f2cb9d861173a25e57fce6906",
  "actionDigest": "ada9223f8a1f4e80edbb39a3bd2de19cdaa477ccfea36644e754b21615179353",
  "releaseDigest": "81c084f93fb2125e6f5c8271e466deda004eb5c93d0020558e56d9c6e2940cdd",
  "sourceManifestDigest": "e8697bcb7e114031877b80144f6ed05ae2ab204e09d6f55ac7176ed83df0635d",
  "correctionType": "redaction-request",
  "consumer": "ops-console",
  "surface": "ops-console",
  "initiatorRole": "compliance",
  "reviewerRole": "compliance",
  "secondConfirmRequired": true,
  "samePersonForbidden": true,
  "originalAuditImmutable": true,
  "originalRollbackImmutable": true,
  "createdAt": "2026-07-31T18:33:40.903Z",
  "writeMode": "dry-run-only"
}

{
  "initiatorSlot": "local-source-correction-initiator",
  "reviewerSlot": "local-source-correction-reviewer",
  "futureIdentityProvider": "future:ops-sso + local-source-surface-release-actor-snapshot",
  "sessionStorage": "future:httpOnly-session + immutable correction approval snapshot",
  "proofRequiredBeforeWrite": true,
  "approvalWriteDisabled": true,
  "correctionWriteDisabled": true,
  "preserveAuditDigest": true,
  "preserveRollbackDigest": true,
  "noPublicSideEffect": true
}