Architecture Cut 72 / Local Source Correction Dual Control

源图审计纠错双人确认 Dry-run

为源图发布审计 correction 事件生成双人确认 schema、角色矩阵、同人禁止和 approvalDigest。当前只读预演：approvalWritten=false，correctionEventWritten=false，auditLogMutated=false，rollbackPackageMutated=false。

Dual JSON 纠错事件纠错事务 MCP Queue MCP Document Citation Lookup 回滚包 BBS 双签范式

4双签 schema

4可校验

4同人禁止

4Approval 禁写

4approvalDigest

0实际写入

Dual Control Approval

发起人与复核人门禁

当前展示单资产/小范围双签详情。

双人确认 dry-run 可校验

元数据纠错 / 香港 Office Harbor Tower

AI / AI 回答脚注 / 批准发布 dry-run

Dual JSON

asset_visual_local_source_surface_release_audit_correction_approvalsinitiator=qareviewer=opssamePersonForbidden=truesecondConfirmRequired=true

approvalDigest3b00ad7629c5...8e52d1

correctionDigest89cc507755ee...adcffb

rollbackDigeste456aa8121d8...80aae6

dualControlDryRun=truedualControlWriteDisabled=trueapprovalWritten=falsecorrectionEventWritten=falseauditLogMutated=falserollbackPackageMutated=falsesessionCreated=falsemcpIndexWritten=falsetradingUseDisabled=true

Role Matrixops: initiate=true / review=true / 负责发起源图消费面纠错、核对回滚包和运营变更单，但不能绕过双人确认。qa: initiate=true / review=true / 负责 digest、source markers、consumer surface 与只读展示一致性复核。editor: initiate=true / review=true / 负责官网、BBS、AI 脚注和公开文案 redaction 口径复核。compliance: initiate=false / review=false / 负责 redaction、策略阻断、非投资建议和 no-trading 红线。admin: initiate=true / review=true / 可以填任一槽位，但不能绕过同人禁止、原审计不可变、原回滚包不可变和写入禁用。

{
  "table": "asset_visual_local_source_surface_release_audit_correction_approvals",
  "schemaVersion": "2026-07-local-source-surface-release-audit-correction-dual-control-v1",
  "approvalId": "asset-visual-local-source-surface-release-audit-correction-dual-control-hk-office-harbor-tower-ai-assistant-approve-surface-release-dry-run",
  "approvalType": "local-source-surface-release-audit-correction-dual-control",
  "correctionEventId": "asset-visual-local-source-surface-release-audit-correction-hk-office-harbor-tower-ai-assistant-approve-surface-release-dry-run",
  "correctionDigest": "89cc507755eef9b47f8f4ee98f70f81b58e495ff1250ceb45dab7088e9adcffb",
  "targetAuditLogId": "asset-visual-local-source-surface-release-action-audit-hk-office-harbor-tower-ai-assistant-approve-surface-release-dry-run",
  "targetAuditDigest": "c35b12942817da70348bd69439b3da53f0d90a7f81719ef481297c7d66176e46",
  "targetRollbackPackageId": "asset-visual-local-source-surface-release-rollback-hk-office-harbor-tower-ai-assistant-approve-surface-release-dry-run",
  "targetRollbackDigest": "e456aa8121d8ab6c10e83a18d8e64c3f7f2de398e571517500a6c73b4d80aae6",
  "actionDigest": "fafba37789a17e0aca2034fa919d297ac1ccd99977b9b1a2c170da512170c768",
  "releaseDigest": "8203a4aeceb6f64a2f6d9b4317ffc1c3fe4e122b6201e7e44c61d7a7a94ca927",
  "sourceManifestDigest": "de78fc03be1bb48c27f079b66399acd8d34c938366b2a98d8c3263d54d6eff53",
  "correctionType": "metadata-correction",
  "consumer": "ai-assistant",
  "surface": "ai-answer",
  "initiatorRole": "qa",
  "reviewerRole": "ops",
  "secondConfirmRequired": true,
  "samePersonForbidden": true,
  "originalAuditImmutable": true,
  "originalRollbackImmutable": true,
  "createdAt": "2026-07-31T18:33:40.903Z",
  "writeMode": "dry-run-only"
}

{
  "initiatorSlot": "local-source-correction-initiator",
  "reviewerSlot": "local-source-correction-reviewer",
  "futureIdentityProvider": "future:ops-sso + local-source-surface-release-actor-snapshot",
  "sessionStorage": "future:httpOnly-session + immutable correction approval snapshot",
  "proofRequiredBeforeWrite": true,
  "approvalWriteDisabled": true,
  "correctionWriteDisabled": true,
  "preserveAuditDigest": true,
  "preserveRollbackDigest": true,
  "noPublicSideEffect": true
}

双签详情 Tx Fix Fix Queue Fix Document 纠错事件回滚包资产详情

双人确认 dry-run 可校验

元数据纠错 / 香港 Office Harbor Tower

AI / AI 回答脚注 / 请求文案修复

Dual JSON

asset_visual_local_source_surface_release_audit_correction_approvalsinitiator=qareviewer=opssamePersonForbidden=truesecondConfirmRequired=true

approvalDigest35f3996d6f5b...f36707

correctionDigestb23f899f0b05...fe0fc2

rollbackDigest0d459e312791...a1dc43

{
  "table": "asset_visual_local_source_surface_release_audit_correction_approvals",
  "schemaVersion": "2026-07-local-source-surface-release-audit-correction-dual-control-v1",
  "approvalId": "asset-visual-local-source-surface-release-audit-correction-dual-control-hk-office-harbor-tower-ai-assistant-request-surface-copy-fix",
  "approvalType": "local-source-surface-release-audit-correction-dual-control",
  "correctionEventId": "asset-visual-local-source-surface-release-audit-correction-hk-office-harbor-tower-ai-assistant-request-surface-copy-fix",
  "correctionDigest": "b23f899f0b05da352c05c511ec21bb618c84872a3abb14af539b72ebf0fe0fc2",
  "targetAuditLogId": "asset-visual-local-source-surface-release-action-audit-hk-office-harbor-tower-ai-assistant-request-surface-copy-fix",
  "targetAuditDigest": "9bbd20c4e98214e81045df0a8a6fd4bc02cc72ed987ca85626b20ba10fb937ad",
  "targetRollbackPackageId": "asset-visual-local-source-surface-release-rollback-hk-office-harbor-tower-ai-assistant-request-surface-copy-fix",
  "targetRollbackDigest": "0d459e3127918908f832484bf9133b83677e84b267dd9076886c4420c0a1dc43",
  "actionDigest": "8bb1513515e98295a0d84b002edbd2ea406f29930f32441ffb9f692d1c3b1244",
  "releaseDigest": "8203a4aeceb6f64a2f6d9b4317ffc1c3fe4e122b6201e7e44c61d7a7a94ca927",
  "sourceManifestDigest": "de78fc03be1bb48c27f079b66399acd8d34c938366b2a98d8c3263d54d6eff53",
  "correctionType": "metadata-correction",
  "consumer": "ai-assistant",
  "surface": "ai-answer",
  "initiatorRole": "qa",
  "reviewerRole": "ops",
  "secondConfirmRequired": true,
  "samePersonForbidden": true,
  "originalAuditImmutable": true,
  "originalRollbackImmutable": true,
  "createdAt": "2026-07-31T18:33:40.903Z",
  "writeMode": "dry-run-only"
}

{
  "initiatorSlot": "local-source-correction-initiator",
  "reviewerSlot": "local-source-correction-reviewer",
  "futureIdentityProvider": "future:ops-sso + local-source-surface-release-actor-snapshot",
  "sessionStorage": "future:httpOnly-session + immutable correction approval snapshot",
  "proofRequiredBeforeWrite": true,
  "approvalWriteDisabled": true,
  "correctionWriteDisabled": true,
  "preserveAuditDigest": true,
  "preserveRollbackDigest": true,
  "noPublicSideEffect": true
}

双签详情 Tx Fix Fix Queue Fix Document 纠错事件回滚包资产详情

双人确认 dry-run 可校验

策略说明 / 香港 Office Harbor Tower

AI / AI 回答脚注 / 请求风控复核

Dual JSON

asset_visual_local_source_surface_release_audit_correction_approvalsinitiator=opsreviewer=compliancesamePersonForbidden=truesecondConfirmRequired=true

approvalDigest4d12581601c1...c4c22a

correctionDigestf1fb9306055e...645458

rollbackDigestf7044843c66e...a033b9

Role Matrixops: initiate=true / review=true / 负责发起源图消费面纠错、核对回滚包和运营变更单，但不能绕过双人确认。qa: initiate=false / review=false / 负责 digest、source markers、consumer surface 与只读展示一致性复核。editor: initiate=false / review=false / 负责官网、BBS、AI 脚注和公开文案 redaction 口径复核。compliance: initiate=true / review=true / 负责 redaction、策略阻断、非投资建议和 no-trading 红线。admin: initiate=true / review=true / 可以填任一槽位，但不能绕过同人禁止、原审计不可变、原回滚包不可变和写入禁用。

{
  "table": "asset_visual_local_source_surface_release_audit_correction_approvals",
  "schemaVersion": "2026-07-local-source-surface-release-audit-correction-dual-control-v1",
  "approvalId": "asset-visual-local-source-surface-release-audit-correction-dual-control-hk-office-harbor-tower-ai-assistant-request-risk-review",
  "approvalType": "local-source-surface-release-audit-correction-dual-control",
  "correctionEventId": "asset-visual-local-source-surface-release-audit-correction-hk-office-harbor-tower-ai-assistant-request-risk-review",
  "correctionDigest": "f1fb9306055ef5110396bb793d3e21965164b1f1ddcfc2f547a9c89355645458",
  "targetAuditLogId": "asset-visual-local-source-surface-release-action-audit-hk-office-harbor-tower-ai-assistant-request-risk-review",
  "targetAuditDigest": "ded35c19e09dc4f824b690e7e837782c6a41cbdba400e5b14a8a0e8e0f7cf46f",
  "targetRollbackPackageId": "asset-visual-local-source-surface-release-rollback-hk-office-harbor-tower-ai-assistant-request-risk-review",
  "targetRollbackDigest": "f7044843c66e21c3aa605421b7a32aaccbf2d0fdad0b1b12d2e254f567a033b9",
  "actionDigest": "a910e73f54000e9678253ee352b214a3e4156f53fc12653e8ec89606090afc08",
  "releaseDigest": "8203a4aeceb6f64a2f6d9b4317ffc1c3fe4e122b6201e7e44c61d7a7a94ca927",
  "sourceManifestDigest": "de78fc03be1bb48c27f079b66399acd8d34c938366b2a98d8c3263d54d6eff53",
  "correctionType": "policy-blocker-note",
  "consumer": "ai-assistant",
  "surface": "ai-answer",
  "initiatorRole": "ops",
  "reviewerRole": "compliance",
  "secondConfirmRequired": true,
  "samePersonForbidden": true,
  "originalAuditImmutable": true,
  "originalRollbackImmutable": true,
  "createdAt": "2026-07-31T18:33:40.903Z",
  "writeMode": "dry-run-only"
}

{
  "initiatorSlot": "local-source-correction-initiator",
  "reviewerSlot": "local-source-correction-reviewer",
  "futureIdentityProvider": "future:ops-sso + local-source-surface-release-actor-snapshot",
  "sessionStorage": "future:httpOnly-session + immutable correction approval snapshot",
  "proofRequiredBeforeWrite": true,
  "approvalWriteDisabled": true,
  "correctionWriteDisabled": true,
  "preserveAuditDigest": true,
  "preserveRollbackDigest": true,
  "noPublicSideEffect": true
}

双签详情 Tx Fix Fix Queue Fix Document 纠错事件回滚包资产详情

双人确认 dry-run 可校验

Redaction 请求 / 香港 Office Harbor Tower

AI / AI 回答脚注 / 拒绝发布

Dual JSON

asset_visual_local_source_surface_release_audit_correction_approvalsinitiator=compliancereviewer=editorsamePersonForbidden=truesecondConfirmRequired=true

approvalDigesteb034910bb02...d54274

correctionDigestd69c00ae09df...6284ee

rollbackDigeste5ac46c73646...f25b73

Role Matrixops: initiate=true / review=false / 负责发起源图消费面纠错、核对回滚包和运营变更单，但不能绕过双人确认。qa: initiate=true / review=false / 负责 digest、source markers、consumer surface 与只读展示一致性复核。editor: initiate=true / review=true / 负责官网、BBS、AI 脚注和公开文案 redaction 口径复核。compliance: initiate=true / review=true / 负责 redaction、策略阻断、非投资建议和 no-trading 红线。admin: initiate=true / review=true / 可以填任一槽位，但不能绕过同人禁止、原审计不可变、原回滚包不可变和写入禁用。

{
  "table": "asset_visual_local_source_surface_release_audit_correction_approvals",
  "schemaVersion": "2026-07-local-source-surface-release-audit-correction-dual-control-v1",
  "approvalId": "asset-visual-local-source-surface-release-audit-correction-dual-control-hk-office-harbor-tower-ai-assistant-reject-surface-release",
  "approvalType": "local-source-surface-release-audit-correction-dual-control",
  "correctionEventId": "asset-visual-local-source-surface-release-audit-correction-hk-office-harbor-tower-ai-assistant-reject-surface-release",
  "correctionDigest": "d69c00ae09dfe66c292767cc23b66ef7908d249ee68d44638144f788c66284ee",
  "targetAuditLogId": "asset-visual-local-source-surface-release-action-audit-hk-office-harbor-tower-ai-assistant-reject-surface-release",
  "targetAuditDigest": "52087227b211092113215bb72f43bd1b508ee8e2e45dc0d084aeffd147c3f7c0",
  "targetRollbackPackageId": "asset-visual-local-source-surface-release-rollback-hk-office-harbor-tower-ai-assistant-reject-surface-release",
  "targetRollbackDigest": "e5ac46c73646252ab5411731ae71e003074e8b7624a8a9506ff4255008f25b73",
  "actionDigest": "c2b793850da88ccc0e1a21ef67ce76d35d3f561214af95d3c15d5ea5fd059d9d",
  "releaseDigest": "8203a4aeceb6f64a2f6d9b4317ffc1c3fe4e122b6201e7e44c61d7a7a94ca927",
  "sourceManifestDigest": "de78fc03be1bb48c27f079b66399acd8d34c938366b2a98d8c3263d54d6eff53",
  "correctionType": "redaction-request",
  "consumer": "ai-assistant",
  "surface": "ai-answer",
  "initiatorRole": "compliance",
  "reviewerRole": "editor",
  "secondConfirmRequired": true,
  "samePersonForbidden": true,
  "originalAuditImmutable": true,
  "originalRollbackImmutable": true,
  "createdAt": "2026-07-31T18:33:40.903Z",
  "writeMode": "dry-run-only"
}

{
  "initiatorSlot": "local-source-correction-initiator",
  "reviewerSlot": "local-source-correction-reviewer",
  "futureIdentityProvider": "future:ops-sso + local-source-surface-release-actor-snapshot",
  "sessionStorage": "future:httpOnly-session + immutable correction approval snapshot",
  "proofRequiredBeforeWrite": true,
  "approvalWriteDisabled": true,
  "correctionWriteDisabled": true,
  "preserveAuditDigest": true,
  "preserveRollbackDigest": true,
  "noPublicSideEffect": true
}