Architecture Cut 72 / Local Source Correction Dual Control

源图审计纠错双人确认 Dry-run

为源图发布审计 correction 事件生成双人确认 schema、角色矩阵、同人禁止和 approvalDigest。当前只读预演：approvalWritten=false，correctionEventWritten=false，auditLogMutated=false，rollbackPackageMutated=false。

Dual JSON 纠错事件纠错事务 MCP Queue MCP Document Citation Lookup 回滚包 BBS 双签范式

4双签 schema

4可校验

4同人禁止

4Approval 禁写

4approvalDigest

0实际写入

Dual Control Approval

发起人与复核人门禁

当前展示单资产/小范围双签详情。

双人确认 dry-run 可校验

元数据纠错 / 美国数据中心 Grid Node

AI / AI 回答脚注 / 批准发布 dry-run

Dual JSON

asset_visual_local_source_surface_release_audit_correction_approvalsinitiator=qareviewer=opssamePersonForbidden=truesecondConfirmRequired=true

approvalDigestba3e624ce17c...139c68

correctionDigest3084facbaaf3...b23f10

rollbackDigest672b2061c860...cd688c

dualControlDryRun=truedualControlWriteDisabled=trueapprovalWritten=falsecorrectionEventWritten=falseauditLogMutated=falserollbackPackageMutated=falsesessionCreated=falsemcpIndexWritten=falsetradingUseDisabled=true

Role Matrixops: initiate=true / review=true / 负责发起源图消费面纠错、核对回滚包和运营变更单，但不能绕过双人确认。qa: initiate=true / review=true / 负责 digest、source markers、consumer surface 与只读展示一致性复核。editor: initiate=true / review=true / 负责官网、BBS、AI 脚注和公开文案 redaction 口径复核。compliance: initiate=false / review=false / 负责 redaction、策略阻断、非投资建议和 no-trading 红线。admin: initiate=true / review=true / 可以填任一槽位，但不能绕过同人禁止、原审计不可变、原回滚包不可变和写入禁用。

{
  "table": "asset_visual_local_source_surface_release_audit_correction_approvals",
  "schemaVersion": "2026-07-local-source-surface-release-audit-correction-dual-control-v1",
  "approvalId": "asset-visual-local-source-surface-release-audit-correction-dual-control-us-data-center-grid-node-ai-assistant-approve-surface-release-dry-run",
  "approvalType": "local-source-surface-release-audit-correction-dual-control",
  "correctionEventId": "asset-visual-local-source-surface-release-audit-correction-us-data-center-grid-node-ai-assistant-approve-surface-release-dry-run",
  "correctionDigest": "3084facbaaf3acc45a57b0e7d446c23099461a0adcf1bde2f5dca1f7e3b23f10",
  "targetAuditLogId": "asset-visual-local-source-surface-release-action-audit-us-data-center-grid-node-ai-assistant-approve-surface-release-dry-run",
  "targetAuditDigest": "904f6a0b4ba5b44a34b68b9f235e562854dbc648196f03b195dc766d14beb895",
  "targetRollbackPackageId": "asset-visual-local-source-surface-release-rollback-us-data-center-grid-node-ai-assistant-approve-surface-release-dry-run",
  "targetRollbackDigest": "672b2061c860d61ac8ee6d1560314298bf20efaca01a7ef249bd2403cfcd688c",
  "actionDigest": "2cd75223270ec282a5c62b75a0a6bc35df6ff2af13d31862857db4df9fb55456",
  "releaseDigest": "0c6c35a4cedf0413e9754b8c4367b202f95a4f6b1a4317fcee75d0876c069d58",
  "sourceManifestDigest": "79ea8788c6fc79ea180441c5246e4201e7371f38b64af575e43dfb03d08d90f8",
  "correctionType": "metadata-correction",
  "consumer": "ai-assistant",
  "surface": "ai-answer",
  "initiatorRole": "qa",
  "reviewerRole": "ops",
  "secondConfirmRequired": true,
  "samePersonForbidden": true,
  "originalAuditImmutable": true,
  "originalRollbackImmutable": true,
  "createdAt": "2026-07-31T18:33:40.903Z",
  "writeMode": "dry-run-only"
}

{
  "initiatorSlot": "local-source-correction-initiator",
  "reviewerSlot": "local-source-correction-reviewer",
  "futureIdentityProvider": "future:ops-sso + local-source-surface-release-actor-snapshot",
  "sessionStorage": "future:httpOnly-session + immutable correction approval snapshot",
  "proofRequiredBeforeWrite": true,
  "approvalWriteDisabled": true,
  "correctionWriteDisabled": true,
  "preserveAuditDigest": true,
  "preserveRollbackDigest": true,
  "noPublicSideEffect": true
}

双签详情 Tx Fix Fix Queue Fix Document 纠错事件回滚包资产详情

双人确认 dry-run 可校验

元数据纠错 / 美国数据中心 Grid Node

AI / AI 回答脚注 / 请求文案修复

Dual JSON

asset_visual_local_source_surface_release_audit_correction_approvalsinitiator=qareviewer=opssamePersonForbidden=truesecondConfirmRequired=true

approvalDigestdfd09bd29be8...01933d

correctionDigest52a64218bba5...de1979

rollbackDigest22e4fb44e2a2...42e2a5

{
  "table": "asset_visual_local_source_surface_release_audit_correction_approvals",
  "schemaVersion": "2026-07-local-source-surface-release-audit-correction-dual-control-v1",
  "approvalId": "asset-visual-local-source-surface-release-audit-correction-dual-control-us-data-center-grid-node-ai-assistant-request-surface-copy-fix",
  "approvalType": "local-source-surface-release-audit-correction-dual-control",
  "correctionEventId": "asset-visual-local-source-surface-release-audit-correction-us-data-center-grid-node-ai-assistant-request-surface-copy-fix",
  "correctionDigest": "52a64218bba5cb9de9abc3c40be46111ac3573db7c7c8888e6ab3b1725de1979",
  "targetAuditLogId": "asset-visual-local-source-surface-release-action-audit-us-data-center-grid-node-ai-assistant-request-surface-copy-fix",
  "targetAuditDigest": "65d3384079391a70852f94d72d08d20071a058446179d949deb2a829dd422296",
  "targetRollbackPackageId": "asset-visual-local-source-surface-release-rollback-us-data-center-grid-node-ai-assistant-request-surface-copy-fix",
  "targetRollbackDigest": "22e4fb44e2a21b8c048f30e7dafda40a345000b0807e6db980877b12d942e2a5",
  "actionDigest": "b7cf7988dbcdd572e24bd9d1ee913aaf733465669172c097ad962bf58afb04f2",
  "releaseDigest": "0c6c35a4cedf0413e9754b8c4367b202f95a4f6b1a4317fcee75d0876c069d58",
  "sourceManifestDigest": "79ea8788c6fc79ea180441c5246e4201e7371f38b64af575e43dfb03d08d90f8",
  "correctionType": "metadata-correction",
  "consumer": "ai-assistant",
  "surface": "ai-answer",
  "initiatorRole": "qa",
  "reviewerRole": "ops",
  "secondConfirmRequired": true,
  "samePersonForbidden": true,
  "originalAuditImmutable": true,
  "originalRollbackImmutable": true,
  "createdAt": "2026-07-31T18:33:40.903Z",
  "writeMode": "dry-run-only"
}

{
  "initiatorSlot": "local-source-correction-initiator",
  "reviewerSlot": "local-source-correction-reviewer",
  "futureIdentityProvider": "future:ops-sso + local-source-surface-release-actor-snapshot",
  "sessionStorage": "future:httpOnly-session + immutable correction approval snapshot",
  "proofRequiredBeforeWrite": true,
  "approvalWriteDisabled": true,
  "correctionWriteDisabled": true,
  "preserveAuditDigest": true,
  "preserveRollbackDigest": true,
  "noPublicSideEffect": true
}

双签详情 Tx Fix Fix Queue Fix Document 纠错事件回滚包资产详情

双人确认 dry-run 可校验

策略说明 / 美国数据中心 Grid Node

AI / AI 回答脚注 / 请求风控复核

Dual JSON

asset_visual_local_source_surface_release_audit_correction_approvalsinitiator=opsreviewer=compliancesamePersonForbidden=truesecondConfirmRequired=true

approvalDigest867cb2bacfc1...cb6bc8

correctionDigestcace6057c9aa...fa5476

rollbackDigest6a98458c3e1d...ba818f

Role Matrixops: initiate=true / review=true / 负责发起源图消费面纠错、核对回滚包和运营变更单，但不能绕过双人确认。qa: initiate=false / review=false / 负责 digest、source markers、consumer surface 与只读展示一致性复核。editor: initiate=false / review=false / 负责官网、BBS、AI 脚注和公开文案 redaction 口径复核。compliance: initiate=true / review=true / 负责 redaction、策略阻断、非投资建议和 no-trading 红线。admin: initiate=true / review=true / 可以填任一槽位，但不能绕过同人禁止、原审计不可变、原回滚包不可变和写入禁用。

{
  "table": "asset_visual_local_source_surface_release_audit_correction_approvals",
  "schemaVersion": "2026-07-local-source-surface-release-audit-correction-dual-control-v1",
  "approvalId": "asset-visual-local-source-surface-release-audit-correction-dual-control-us-data-center-grid-node-ai-assistant-request-risk-review",
  "approvalType": "local-source-surface-release-audit-correction-dual-control",
  "correctionEventId": "asset-visual-local-source-surface-release-audit-correction-us-data-center-grid-node-ai-assistant-request-risk-review",
  "correctionDigest": "cace6057c9aaf2abd53fc262181062d516ec4b711ac372906375075d22fa5476",
  "targetAuditLogId": "asset-visual-local-source-surface-release-action-audit-us-data-center-grid-node-ai-assistant-request-risk-review",
  "targetAuditDigest": "5a44c42191b3bfab38a1a813661bf70a1ff246f8a5624c4ffe8273442c28188e",
  "targetRollbackPackageId": "asset-visual-local-source-surface-release-rollback-us-data-center-grid-node-ai-assistant-request-risk-review",
  "targetRollbackDigest": "6a98458c3e1d160f857610aadd8c6d93d2ad37e920bec9df9a67e8b3e5ba818f",
  "actionDigest": "d53ca4b152250853bc2ca52a0fafb8cd9ff8f4359aa26dbd6aef91dfedb0c317",
  "releaseDigest": "0c6c35a4cedf0413e9754b8c4367b202f95a4f6b1a4317fcee75d0876c069d58",
  "sourceManifestDigest": "79ea8788c6fc79ea180441c5246e4201e7371f38b64af575e43dfb03d08d90f8",
  "correctionType": "policy-blocker-note",
  "consumer": "ai-assistant",
  "surface": "ai-answer",
  "initiatorRole": "ops",
  "reviewerRole": "compliance",
  "secondConfirmRequired": true,
  "samePersonForbidden": true,
  "originalAuditImmutable": true,
  "originalRollbackImmutable": true,
  "createdAt": "2026-07-31T18:33:40.903Z",
  "writeMode": "dry-run-only"
}

{
  "initiatorSlot": "local-source-correction-initiator",
  "reviewerSlot": "local-source-correction-reviewer",
  "futureIdentityProvider": "future:ops-sso + local-source-surface-release-actor-snapshot",
  "sessionStorage": "future:httpOnly-session + immutable correction approval snapshot",
  "proofRequiredBeforeWrite": true,
  "approvalWriteDisabled": true,
  "correctionWriteDisabled": true,
  "preserveAuditDigest": true,
  "preserveRollbackDigest": true,
  "noPublicSideEffect": true
}

双签详情 Tx Fix Fix Queue Fix Document 纠错事件回滚包资产详情

双人确认 dry-run 可校验

Redaction 请求 / 美国数据中心 Grid Node

AI / AI 回答脚注 / 拒绝发布

Dual JSON

asset_visual_local_source_surface_release_audit_correction_approvalsinitiator=compliancereviewer=editorsamePersonForbidden=truesecondConfirmRequired=true

approvalDigest288c3cf42077...f2337d

correctionDigestdaa35a5c0657...979d01

rollbackDigest4411f0fbe36b...025f72

Role Matrixops: initiate=true / review=false / 负责发起源图消费面纠错、核对回滚包和运营变更单，但不能绕过双人确认。qa: initiate=true / review=false / 负责 digest、source markers、consumer surface 与只读展示一致性复核。editor: initiate=true / review=true / 负责官网、BBS、AI 脚注和公开文案 redaction 口径复核。compliance: initiate=true / review=true / 负责 redaction、策略阻断、非投资建议和 no-trading 红线。admin: initiate=true / review=true / 可以填任一槽位，但不能绕过同人禁止、原审计不可变、原回滚包不可变和写入禁用。

{
  "table": "asset_visual_local_source_surface_release_audit_correction_approvals",
  "schemaVersion": "2026-07-local-source-surface-release-audit-correction-dual-control-v1",
  "approvalId": "asset-visual-local-source-surface-release-audit-correction-dual-control-us-data-center-grid-node-ai-assistant-reject-surface-release",
  "approvalType": "local-source-surface-release-audit-correction-dual-control",
  "correctionEventId": "asset-visual-local-source-surface-release-audit-correction-us-data-center-grid-node-ai-assistant-reject-surface-release",
  "correctionDigest": "daa35a5c06571c3a597d7d82e789ff42aa72c3cf18961738b35d0aa374979d01",
  "targetAuditLogId": "asset-visual-local-source-surface-release-action-audit-us-data-center-grid-node-ai-assistant-reject-surface-release",
  "targetAuditDigest": "ee69ae260ea6719573eeefec13f521b1425089d26cbd2633dbc3a5dce9a60c6c",
  "targetRollbackPackageId": "asset-visual-local-source-surface-release-rollback-us-data-center-grid-node-ai-assistant-reject-surface-release",
  "targetRollbackDigest": "4411f0fbe36b526bbee5f98e237ff4f28ecff69cb1aedcb8626de1637c025f72",
  "actionDigest": "37873073366d3aff5293b261dc3a3d2ecb9af6b94402e5f108e8eb3f93296173",
  "releaseDigest": "0c6c35a4cedf0413e9754b8c4367b202f95a4f6b1a4317fcee75d0876c069d58",
  "sourceManifestDigest": "79ea8788c6fc79ea180441c5246e4201e7371f38b64af575e43dfb03d08d90f8",
  "correctionType": "redaction-request",
  "consumer": "ai-assistant",
  "surface": "ai-answer",
  "initiatorRole": "compliance",
  "reviewerRole": "editor",
  "secondConfirmRequired": true,
  "samePersonForbidden": true,
  "originalAuditImmutable": true,
  "originalRollbackImmutable": true,
  "createdAt": "2026-07-31T18:33:40.903Z",
  "writeMode": "dry-run-only"
}

{
  "initiatorSlot": "local-source-correction-initiator",
  "reviewerSlot": "local-source-correction-reviewer",
  "futureIdentityProvider": "future:ops-sso + local-source-surface-release-actor-snapshot",
  "sessionStorage": "future:httpOnly-session + immutable correction approval snapshot",
  "proofRequiredBeforeWrite": true,
  "approvalWriteDisabled": true,
  "correctionWriteDisabled": true,
  "preserveAuditDigest": true,
  "preserveRollbackDigest": true,
  "noPublicSideEffect": true
}