Architecture Cut 72 / Local Source Correction Dual Control

源图审计纠错双人确认 Dry-run

为源图发布审计 correction 事件生成双人确认 schema、角色矩阵、同人禁止和 approvalDigest。当前只读预演：approvalWritten=false，correctionEventWritten=false，auditLogMutated=false，rollbackPackageMutated=false。

Dual JSON 纠错事件纠错事务 MCP Queue MCP Document Citation Lookup 回滚包 BBS 双签范式

4双签 schema

4可校验

4同人禁止

4Approval 禁写

4approvalDigest

0实际写入

Dual Control Approval

发起人与复核人门禁

当前展示单资产/小范围双签详情。

双人确认 dry-run 可校验

元数据纠错 / 美国数据中心 Grid Node

资产地图 / 地图资产详情 / 批准发布 dry-run

Dual JSON

asset_visual_local_source_surface_release_audit_correction_approvalsinitiator=qareviewer=qasamePersonForbidden=truesecondConfirmRequired=true

approvalDigest1766118b7cad...d1903a

correctionDigestab693b410050...e58722

rollbackDigest0c16cccc2b97...c4fc34

dualControlDryRun=truedualControlWriteDisabled=trueapprovalWritten=falsecorrectionEventWritten=falseauditLogMutated=falserollbackPackageMutated=falsesessionCreated=falsemcpIndexWritten=falsetradingUseDisabled=true

Role Matrixops: initiate=true / review=true / 负责发起源图消费面纠错、核对回滚包和运营变更单，但不能绕过双人确认。qa: initiate=true / review=true / 负责 digest、source markers、consumer surface 与只读展示一致性复核。editor: initiate=true / review=true / 负责官网、BBS、AI 脚注和公开文案 redaction 口径复核。compliance: initiate=false / review=false / 负责 redaction、策略阻断、非投资建议和 no-trading 红线。admin: initiate=true / review=true / 可以填任一槽位，但不能绕过同人禁止、原审计不可变、原回滚包不可变和写入禁用。

{
  "table": "asset_visual_local_source_surface_release_audit_correction_approvals",
  "schemaVersion": "2026-07-local-source-surface-release-audit-correction-dual-control-v1",
  "approvalId": "asset-visual-local-source-surface-release-audit-correction-dual-control-us-data-center-grid-node-asset-map-approve-surface-release-dry-run",
  "approvalType": "local-source-surface-release-audit-correction-dual-control",
  "correctionEventId": "asset-visual-local-source-surface-release-audit-correction-us-data-center-grid-node-asset-map-approve-surface-release-dry-run",
  "correctionDigest": "ab693b41005015f8dc37878c207d18157d751dfebd8499f5e4bf0c5d42e58722",
  "targetAuditLogId": "asset-visual-local-source-surface-release-action-audit-us-data-center-grid-node-asset-map-approve-surface-release-dry-run",
  "targetAuditDigest": "17d30dbe3afa0a181f5abc90134a364ed4a8613dcb4332a9bbd5deac7e7f5a3f",
  "targetRollbackPackageId": "asset-visual-local-source-surface-release-rollback-us-data-center-grid-node-asset-map-approve-surface-release-dry-run",
  "targetRollbackDigest": "0c16cccc2b9720500f5facec9194df64f5a7833309f10b0a6848ac1730c4fc34",
  "actionDigest": "ad00bb657b8b0ec419eb70918d2fcff02ea14703db0dbfdbc9c4d180f0993659",
  "releaseDigest": "f75ea8acb6a60135122b02f57dab9039dc0c19474c1fcbfd13d8b2fa4c641644",
  "sourceManifestDigest": "79ea8788c6fc79ea180441c5246e4201e7371f38b64af575e43dfb03d08d90f8",
  "correctionType": "metadata-correction",
  "consumer": "asset-map",
  "surface": "asset-map-detail",
  "initiatorRole": "qa",
  "reviewerRole": "qa",
  "secondConfirmRequired": true,
  "samePersonForbidden": true,
  "originalAuditImmutable": true,
  "originalRollbackImmutable": true,
  "createdAt": "2026-07-31T18:33:40.903Z",
  "writeMode": "dry-run-only"
}

{
  "initiatorSlot": "local-source-correction-initiator",
  "reviewerSlot": "local-source-correction-reviewer",
  "futureIdentityProvider": "future:ops-sso + local-source-surface-release-actor-snapshot",
  "sessionStorage": "future:httpOnly-session + immutable correction approval snapshot",
  "proofRequiredBeforeWrite": true,
  "approvalWriteDisabled": true,
  "correctionWriteDisabled": true,
  "preserveAuditDigest": true,
  "preserveRollbackDigest": true,
  "noPublicSideEffect": true
}

双签详情 Tx Fix Fix Queue Fix Document 纠错事件回滚包资产详情

双人确认 dry-run 可校验

元数据纠错 / 美国数据中心 Grid Node

资产地图 / 地图资产详情 / 请求文案修复

Dual JSON

asset_visual_local_source_surface_release_audit_correction_approvalsinitiator=qareviewer=qasamePersonForbidden=truesecondConfirmRequired=true

approvalDigeste2684f0cf965...48fa5c

correctionDigestf348c1cbec9e...66cef0

rollbackDigest9d1040d41ce9...31c578

{
  "table": "asset_visual_local_source_surface_release_audit_correction_approvals",
  "schemaVersion": "2026-07-local-source-surface-release-audit-correction-dual-control-v1",
  "approvalId": "asset-visual-local-source-surface-release-audit-correction-dual-control-us-data-center-grid-node-asset-map-request-surface-copy-fix",
  "approvalType": "local-source-surface-release-audit-correction-dual-control",
  "correctionEventId": "asset-visual-local-source-surface-release-audit-correction-us-data-center-grid-node-asset-map-request-surface-copy-fix",
  "correctionDigest": "f348c1cbec9e1dd5e10332c2d169963247ead584b0ed82cab93a291f9f66cef0",
  "targetAuditLogId": "asset-visual-local-source-surface-release-action-audit-us-data-center-grid-node-asset-map-request-surface-copy-fix",
  "targetAuditDigest": "d41b7fc6189161cdd364e6036d6e152e0e3a3820832128785af704db1b328edf",
  "targetRollbackPackageId": "asset-visual-local-source-surface-release-rollback-us-data-center-grid-node-asset-map-request-surface-copy-fix",
  "targetRollbackDigest": "9d1040d41ce9c7078f9cd7a8e4f3cffcf95764ea1810a8cd57118f1b1d31c578",
  "actionDigest": "853e614706ebf3a6b70c5ea2931d4e1620a0231d9f9717d3dad3cf1f047a9bef",
  "releaseDigest": "f75ea8acb6a60135122b02f57dab9039dc0c19474c1fcbfd13d8b2fa4c641644",
  "sourceManifestDigest": "79ea8788c6fc79ea180441c5246e4201e7371f38b64af575e43dfb03d08d90f8",
  "correctionType": "metadata-correction",
  "consumer": "asset-map",
  "surface": "asset-map-detail",
  "initiatorRole": "qa",
  "reviewerRole": "qa",
  "secondConfirmRequired": true,
  "samePersonForbidden": true,
  "originalAuditImmutable": true,
  "originalRollbackImmutable": true,
  "createdAt": "2026-07-31T18:33:40.903Z",
  "writeMode": "dry-run-only"
}

{
  "initiatorSlot": "local-source-correction-initiator",
  "reviewerSlot": "local-source-correction-reviewer",
  "futureIdentityProvider": "future:ops-sso + local-source-surface-release-actor-snapshot",
  "sessionStorage": "future:httpOnly-session + immutable correction approval snapshot",
  "proofRequiredBeforeWrite": true,
  "approvalWriteDisabled": true,
  "correctionWriteDisabled": true,
  "preserveAuditDigest": true,
  "preserveRollbackDigest": true,
  "noPublicSideEffect": true
}

双签详情 Tx Fix Fix Queue Fix Document 纠错事件回滚包资产详情

双人确认 dry-run 可校验

策略说明 / 美国数据中心 Grid Node

资产地图 / 地图资产详情 / 请求风控复核

Dual JSON

asset_visual_local_source_surface_release_audit_correction_approvalsinitiator=opsreviewer=compliancesamePersonForbidden=truesecondConfirmRequired=true

approvalDigest7515bd3fb61e...ee35c2

correctionDigest1c20292b0349...e83154

rollbackDigest7aa7c29f65cc...9d1ba1

Role Matrixops: initiate=true / review=true / 负责发起源图消费面纠错、核对回滚包和运营变更单，但不能绕过双人确认。qa: initiate=false / review=false / 负责 digest、source markers、consumer surface 与只读展示一致性复核。editor: initiate=false / review=false / 负责官网、BBS、AI 脚注和公开文案 redaction 口径复核。compliance: initiate=true / review=true / 负责 redaction、策略阻断、非投资建议和 no-trading 红线。admin: initiate=true / review=true / 可以填任一槽位，但不能绕过同人禁止、原审计不可变、原回滚包不可变和写入禁用。

{
  "table": "asset_visual_local_source_surface_release_audit_correction_approvals",
  "schemaVersion": "2026-07-local-source-surface-release-audit-correction-dual-control-v1",
  "approvalId": "asset-visual-local-source-surface-release-audit-correction-dual-control-us-data-center-grid-node-asset-map-request-risk-review",
  "approvalType": "local-source-surface-release-audit-correction-dual-control",
  "correctionEventId": "asset-visual-local-source-surface-release-audit-correction-us-data-center-grid-node-asset-map-request-risk-review",
  "correctionDigest": "1c20292b034979ac6b8ff66024db62d9c551d85eaa9b3c221a98fb189be83154",
  "targetAuditLogId": "asset-visual-local-source-surface-release-action-audit-us-data-center-grid-node-asset-map-request-risk-review",
  "targetAuditDigest": "06855fc2ab810f8e2c410b2ffe35a54e8dfa44fcb0f17a947880d4c5e668345d",
  "targetRollbackPackageId": "asset-visual-local-source-surface-release-rollback-us-data-center-grid-node-asset-map-request-risk-review",
  "targetRollbackDigest": "7aa7c29f65cc80cf02f616f5061ecf022c3dd4bbddab4f956b6199aa019d1ba1",
  "actionDigest": "e4e01349f61913ca19e71e5852542f556185838bd7a91926c3d77080fd549256",
  "releaseDigest": "f75ea8acb6a60135122b02f57dab9039dc0c19474c1fcbfd13d8b2fa4c641644",
  "sourceManifestDigest": "79ea8788c6fc79ea180441c5246e4201e7371f38b64af575e43dfb03d08d90f8",
  "correctionType": "policy-blocker-note",
  "consumer": "asset-map",
  "surface": "asset-map-detail",
  "initiatorRole": "ops",
  "reviewerRole": "compliance",
  "secondConfirmRequired": true,
  "samePersonForbidden": true,
  "originalAuditImmutable": true,
  "originalRollbackImmutable": true,
  "createdAt": "2026-07-31T18:33:40.903Z",
  "writeMode": "dry-run-only"
}

{
  "initiatorSlot": "local-source-correction-initiator",
  "reviewerSlot": "local-source-correction-reviewer",
  "futureIdentityProvider": "future:ops-sso + local-source-surface-release-actor-snapshot",
  "sessionStorage": "future:httpOnly-session + immutable correction approval snapshot",
  "proofRequiredBeforeWrite": true,
  "approvalWriteDisabled": true,
  "correctionWriteDisabled": true,
  "preserveAuditDigest": true,
  "preserveRollbackDigest": true,
  "noPublicSideEffect": true
}

双签详情 Tx Fix Fix Queue Fix Document 纠错事件回滚包资产详情

双人确认 dry-run 可校验

Redaction 请求 / 美国数据中心 Grid Node

资产地图 / 地图资产详情 / 拒绝发布

Dual JSON

asset_visual_local_source_surface_release_audit_correction_approvalsinitiator=compliancereviewer=compliancesamePersonForbidden=truesecondConfirmRequired=true

approvalDigesta1be4d3218cb...c2d779

correctionDigest5fbdf5d5d7b8...2894d5

rollbackDigest8743b5f11408...21de28

Role Matrixops: initiate=true / review=false / 负责发起源图消费面纠错、核对回滚包和运营变更单，但不能绕过双人确认。qa: initiate=true / review=false / 负责 digest、source markers、consumer surface 与只读展示一致性复核。editor: initiate=true / review=true / 负责官网、BBS、AI 脚注和公开文案 redaction 口径复核。compliance: initiate=true / review=true / 负责 redaction、策略阻断、非投资建议和 no-trading 红线。admin: initiate=true / review=true / 可以填任一槽位，但不能绕过同人禁止、原审计不可变、原回滚包不可变和写入禁用。

{
  "table": "asset_visual_local_source_surface_release_audit_correction_approvals",
  "schemaVersion": "2026-07-local-source-surface-release-audit-correction-dual-control-v1",
  "approvalId": "asset-visual-local-source-surface-release-audit-correction-dual-control-us-data-center-grid-node-asset-map-reject-surface-release",
  "approvalType": "local-source-surface-release-audit-correction-dual-control",
  "correctionEventId": "asset-visual-local-source-surface-release-audit-correction-us-data-center-grid-node-asset-map-reject-surface-release",
  "correctionDigest": "5fbdf5d5d7b8c7290556c840380c70b0664d7f8328a572593a036c61f12894d5",
  "targetAuditLogId": "asset-visual-local-source-surface-release-action-audit-us-data-center-grid-node-asset-map-reject-surface-release",
  "targetAuditDigest": "1b48e5daae1db5741592b22c37320a1a2b662b494a7ff7e1493c04a394a58de0",
  "targetRollbackPackageId": "asset-visual-local-source-surface-release-rollback-us-data-center-grid-node-asset-map-reject-surface-release",
  "targetRollbackDigest": "8743b5f114083fb91ad9c6122bbe449aacf554d9b9eab85e166ca5392c21de28",
  "actionDigest": "4552f9e33624f2de3cc769114597ef3e0be9be0f76a5530c430ca1ff5b7c98ac",
  "releaseDigest": "f75ea8acb6a60135122b02f57dab9039dc0c19474c1fcbfd13d8b2fa4c641644",
  "sourceManifestDigest": "79ea8788c6fc79ea180441c5246e4201e7371f38b64af575e43dfb03d08d90f8",
  "correctionType": "redaction-request",
  "consumer": "asset-map",
  "surface": "asset-map-detail",
  "initiatorRole": "compliance",
  "reviewerRole": "compliance",
  "secondConfirmRequired": true,
  "samePersonForbidden": true,
  "originalAuditImmutable": true,
  "originalRollbackImmutable": true,
  "createdAt": "2026-07-31T18:33:40.903Z",
  "writeMode": "dry-run-only"
}

{
  "initiatorSlot": "local-source-correction-initiator",
  "reviewerSlot": "local-source-correction-reviewer",
  "futureIdentityProvider": "future:ops-sso + local-source-surface-release-actor-snapshot",
  "sessionStorage": "future:httpOnly-session + immutable correction approval snapshot",
  "proofRequiredBeforeWrite": true,
  "approvalWriteDisabled": true,
  "correctionWriteDisabled": true,
  "preserveAuditDigest": true,
  "preserveRollbackDigest": true,
  "noPublicSideEffect": true
}