Architecture Cut 72 / Local Source Correction Dual Control

源图审计纠错双人确认 Dry-run

为源图发布审计 correction 事件生成双人确认 schema、角色矩阵、同人禁止和 approvalDigest。当前只读预演：approvalWritten=false，correctionEventWritten=false，auditLogMutated=false，rollbackPackageMutated=false。

Dual JSON 纠错事件纠错事务 MCP Queue MCP Document Citation Lookup 回滚包 BBS 双签范式

4双签 schema

4可校验

4同人禁止

4Approval 禁写

4approvalDigest

0实际写入

Dual Control Approval

发起人与复核人门禁

当前展示单资产/小范围双签详情。

双人确认 dry-run 可校验

元数据纠错 / 美国数据中心 Grid Node

资产地图 / 地图资产详情 / 批准发布 dry-run

Dual JSON

asset_visual_local_source_surface_release_audit_correction_approvalsinitiator=qareviewer=qasamePersonForbidden=truesecondConfirmRequired=true

approvalDigestf36b2cf8ac1a...564fd2

correctionDigestb901f33cd4b4...53b4d5

rollbackDigest563cf308a98c...bd711c

dualControlDryRun=truedualControlWriteDisabled=trueapprovalWritten=falsecorrectionEventWritten=falseauditLogMutated=falserollbackPackageMutated=falsesessionCreated=falsemcpIndexWritten=falsetradingUseDisabled=true

Role Matrixops: initiate=true / review=true / 负责发起源图消费面纠错、核对回滚包和运营变更单，但不能绕过双人确认。qa: initiate=true / review=true / 负责 digest、source markers、consumer surface 与只读展示一致性复核。editor: initiate=true / review=true / 负责官网、BBS、AI 脚注和公开文案 redaction 口径复核。compliance: initiate=false / review=false / 负责 redaction、策略阻断、非投资建议和 no-trading 红线。admin: initiate=true / review=true / 可以填任一槽位，但不能绕过同人禁止、原审计不可变、原回滚包不可变和写入禁用。

{
  "table": "asset_visual_local_source_surface_release_audit_correction_approvals",
  "schemaVersion": "2026-07-local-source-surface-release-audit-correction-dual-control-v1",
  "approvalId": "asset-visual-local-source-surface-release-audit-correction-dual-control-us-data-center-grid-node-asset-map-approve-surface-release-dry-run",
  "approvalType": "local-source-surface-release-audit-correction-dual-control",
  "correctionEventId": "asset-visual-local-source-surface-release-audit-correction-us-data-center-grid-node-asset-map-approve-surface-release-dry-run",
  "correctionDigest": "b901f33cd4b4928ee4f91d6ed90bd5145bf07502dafd9c0afabbf2d36053b4d5",
  "targetAuditLogId": "asset-visual-local-source-surface-release-action-audit-us-data-center-grid-node-asset-map-approve-surface-release-dry-run",
  "targetAuditDigest": "e988ff512ccc9d57e3bd0f648f0039a8bd59b149da41eff647b32fb303e789d3",
  "targetRollbackPackageId": "asset-visual-local-source-surface-release-rollback-us-data-center-grid-node-asset-map-approve-surface-release-dry-run",
  "targetRollbackDigest": "563cf308a98cb825675de732a6e139efb7bfeb9d926af64fec7e647cb2bd711c",
  "actionDigest": "3ba87f9896a6221472b684dec656259c36b47ab03a3e408bb11a0f7f6115012c",
  "releaseDigest": "fb997dcd24daf474a5a96b3fb3c7803ce1d8ce63e0733f21605ce98c9692ca96",
  "sourceManifestDigest": "bf991e64d79f2ccfe624cd3e1015aa7c51006d034fe6f0b0bb67151840235036",
  "correctionType": "metadata-correction",
  "consumer": "asset-map",
  "surface": "asset-map-detail",
  "initiatorRole": "qa",
  "reviewerRole": "qa",
  "secondConfirmRequired": true,
  "samePersonForbidden": true,
  "originalAuditImmutable": true,
  "originalRollbackImmutable": true,
  "createdAt": "2026-07-31T18:33:40.903Z",
  "writeMode": "dry-run-only"
}

{
  "initiatorSlot": "local-source-correction-initiator",
  "reviewerSlot": "local-source-correction-reviewer",
  "futureIdentityProvider": "future:ops-sso + local-source-surface-release-actor-snapshot",
  "sessionStorage": "future:httpOnly-session + immutable correction approval snapshot",
  "proofRequiredBeforeWrite": true,
  "approvalWriteDisabled": true,
  "correctionWriteDisabled": true,
  "preserveAuditDigest": true,
  "preserveRollbackDigest": true,
  "noPublicSideEffect": true
}

双签详情 Tx Fix Fix Queue Fix Document 纠错事件回滚包资产详情

双人确认 dry-run 可校验

元数据纠错 / 美国数据中心 Grid Node

资产地图 / 地图资产详情 / 请求文案修复

Dual JSON

asset_visual_local_source_surface_release_audit_correction_approvalsinitiator=qareviewer=qasamePersonForbidden=truesecondConfirmRequired=true

approvalDigest2d82830aa459...49920a

correctionDigest70d918c5510e...e270d2

rollbackDigest30aae8f6e1ee...884e39

{
  "table": "asset_visual_local_source_surface_release_audit_correction_approvals",
  "schemaVersion": "2026-07-local-source-surface-release-audit-correction-dual-control-v1",
  "approvalId": "asset-visual-local-source-surface-release-audit-correction-dual-control-us-data-center-grid-node-asset-map-request-surface-copy-fix",
  "approvalType": "local-source-surface-release-audit-correction-dual-control",
  "correctionEventId": "asset-visual-local-source-surface-release-audit-correction-us-data-center-grid-node-asset-map-request-surface-copy-fix",
  "correctionDigest": "70d918c5510e9aae32d13c0da9aedca34545deae49f0ebdee7eb9d1e9ce270d2",
  "targetAuditLogId": "asset-visual-local-source-surface-release-action-audit-us-data-center-grid-node-asset-map-request-surface-copy-fix",
  "targetAuditDigest": "4aab507aa1742bbe77311a910ebbdc122751d10417031287d4f649b0818e2462",
  "targetRollbackPackageId": "asset-visual-local-source-surface-release-rollback-us-data-center-grid-node-asset-map-request-surface-copy-fix",
  "targetRollbackDigest": "30aae8f6e1ee83ee943f1a7bdea86f73fcd1ea7e35de909d014961b2eb884e39",
  "actionDigest": "2072d6259004ff699f8467bd5832f3c998c20c3da531c7809a64cc8cf85be5c6",
  "releaseDigest": "fb997dcd24daf474a5a96b3fb3c7803ce1d8ce63e0733f21605ce98c9692ca96",
  "sourceManifestDigest": "bf991e64d79f2ccfe624cd3e1015aa7c51006d034fe6f0b0bb67151840235036",
  "correctionType": "metadata-correction",
  "consumer": "asset-map",
  "surface": "asset-map-detail",
  "initiatorRole": "qa",
  "reviewerRole": "qa",
  "secondConfirmRequired": true,
  "samePersonForbidden": true,
  "originalAuditImmutable": true,
  "originalRollbackImmutable": true,
  "createdAt": "2026-07-31T18:33:40.903Z",
  "writeMode": "dry-run-only"
}

{
  "initiatorSlot": "local-source-correction-initiator",
  "reviewerSlot": "local-source-correction-reviewer",
  "futureIdentityProvider": "future:ops-sso + local-source-surface-release-actor-snapshot",
  "sessionStorage": "future:httpOnly-session + immutable correction approval snapshot",
  "proofRequiredBeforeWrite": true,
  "approvalWriteDisabled": true,
  "correctionWriteDisabled": true,
  "preserveAuditDigest": true,
  "preserveRollbackDigest": true,
  "noPublicSideEffect": true
}

双签详情 Tx Fix Fix Queue Fix Document 纠错事件回滚包资产详情

双人确认 dry-run 可校验

策略说明 / 美国数据中心 Grid Node

资产地图 / 地图资产详情 / 请求风控复核

Dual JSON

asset_visual_local_source_surface_release_audit_correction_approvalsinitiator=opsreviewer=compliancesamePersonForbidden=truesecondConfirmRequired=true

approvalDigesta685ade181c5...40051f

correctionDigest7a3daccab4b0...181318

rollbackDigestd06327bb9ed6...1c37af

Role Matrixops: initiate=true / review=true / 负责发起源图消费面纠错、核对回滚包和运营变更单，但不能绕过双人确认。qa: initiate=false / review=false / 负责 digest、source markers、consumer surface 与只读展示一致性复核。editor: initiate=false / review=false / 负责官网、BBS、AI 脚注和公开文案 redaction 口径复核。compliance: initiate=true / review=true / 负责 redaction、策略阻断、非投资建议和 no-trading 红线。admin: initiate=true / review=true / 可以填任一槽位，但不能绕过同人禁止、原审计不可变、原回滚包不可变和写入禁用。

{
  "table": "asset_visual_local_source_surface_release_audit_correction_approvals",
  "schemaVersion": "2026-07-local-source-surface-release-audit-correction-dual-control-v1",
  "approvalId": "asset-visual-local-source-surface-release-audit-correction-dual-control-us-data-center-grid-node-asset-map-request-risk-review",
  "approvalType": "local-source-surface-release-audit-correction-dual-control",
  "correctionEventId": "asset-visual-local-source-surface-release-audit-correction-us-data-center-grid-node-asset-map-request-risk-review",
  "correctionDigest": "7a3daccab4b0a6c9b6113d1db45b5ee8651e1a121123a7607896ff92cf181318",
  "targetAuditLogId": "asset-visual-local-source-surface-release-action-audit-us-data-center-grid-node-asset-map-request-risk-review",
  "targetAuditDigest": "f171f67612129d39f59fbea5b6661df81b44b74e9a29761cb9d3695cc0a7851b",
  "targetRollbackPackageId": "asset-visual-local-source-surface-release-rollback-us-data-center-grid-node-asset-map-request-risk-review",
  "targetRollbackDigest": "d06327bb9ed61d8582d11edf898ff1b5c9f3d1ee2db8dfb8f5bd58f6091c37af",
  "actionDigest": "dd200a7a38b0e43188cf6b33bafda6534fd8badb0ab17c77577a97d3c8b6e91d",
  "releaseDigest": "fb997dcd24daf474a5a96b3fb3c7803ce1d8ce63e0733f21605ce98c9692ca96",
  "sourceManifestDigest": "bf991e64d79f2ccfe624cd3e1015aa7c51006d034fe6f0b0bb67151840235036",
  "correctionType": "policy-blocker-note",
  "consumer": "asset-map",
  "surface": "asset-map-detail",
  "initiatorRole": "ops",
  "reviewerRole": "compliance",
  "secondConfirmRequired": true,
  "samePersonForbidden": true,
  "originalAuditImmutable": true,
  "originalRollbackImmutable": true,
  "createdAt": "2026-07-31T18:33:40.903Z",
  "writeMode": "dry-run-only"
}

{
  "initiatorSlot": "local-source-correction-initiator",
  "reviewerSlot": "local-source-correction-reviewer",
  "futureIdentityProvider": "future:ops-sso + local-source-surface-release-actor-snapshot",
  "sessionStorage": "future:httpOnly-session + immutable correction approval snapshot",
  "proofRequiredBeforeWrite": true,
  "approvalWriteDisabled": true,
  "correctionWriteDisabled": true,
  "preserveAuditDigest": true,
  "preserveRollbackDigest": true,
  "noPublicSideEffect": true
}

双签详情 Tx Fix Fix Queue Fix Document 纠错事件回滚包资产详情

双人确认 dry-run 可校验

Redaction 请求 / 美国数据中心 Grid Node

资产地图 / 地图资产详情 / 拒绝发布

Dual JSON

asset_visual_local_source_surface_release_audit_correction_approvalsinitiator=compliancereviewer=compliancesamePersonForbidden=truesecondConfirmRequired=true

approvalDigest966db50abe2d...e86bfd

correctionDigestfb8cfc372405...f3bd23

rollbackDigest4e9ed6e385a1...69b9e9

Role Matrixops: initiate=true / review=false / 负责发起源图消费面纠错、核对回滚包和运营变更单，但不能绕过双人确认。qa: initiate=true / review=false / 负责 digest、source markers、consumer surface 与只读展示一致性复核。editor: initiate=true / review=true / 负责官网、BBS、AI 脚注和公开文案 redaction 口径复核。compliance: initiate=true / review=true / 负责 redaction、策略阻断、非投资建议和 no-trading 红线。admin: initiate=true / review=true / 可以填任一槽位，但不能绕过同人禁止、原审计不可变、原回滚包不可变和写入禁用。

{
  "table": "asset_visual_local_source_surface_release_audit_correction_approvals",
  "schemaVersion": "2026-07-local-source-surface-release-audit-correction-dual-control-v1",
  "approvalId": "asset-visual-local-source-surface-release-audit-correction-dual-control-us-data-center-grid-node-asset-map-reject-surface-release",
  "approvalType": "local-source-surface-release-audit-correction-dual-control",
  "correctionEventId": "asset-visual-local-source-surface-release-audit-correction-us-data-center-grid-node-asset-map-reject-surface-release",
  "correctionDigest": "fb8cfc372405faacf275c183ccad4aac8972b70e8aab1e999d9f209036f3bd23",
  "targetAuditLogId": "asset-visual-local-source-surface-release-action-audit-us-data-center-grid-node-asset-map-reject-surface-release",
  "targetAuditDigest": "18157dccd37014b8525ea155de6474991b3eb03132407bc668a39a13c6e79954",
  "targetRollbackPackageId": "asset-visual-local-source-surface-release-rollback-us-data-center-grid-node-asset-map-reject-surface-release",
  "targetRollbackDigest": "4e9ed6e385a1553221a50a9b599997bee7b05a6af542a8b56370cb6da769b9e9",
  "actionDigest": "7e358e62bc8b4c45b6ffc3264f40a66745088658e6d7bca49298ad41010d8ab1",
  "releaseDigest": "fb997dcd24daf474a5a96b3fb3c7803ce1d8ce63e0733f21605ce98c9692ca96",
  "sourceManifestDigest": "bf991e64d79f2ccfe624cd3e1015aa7c51006d034fe6f0b0bb67151840235036",
  "correctionType": "redaction-request",
  "consumer": "asset-map",
  "surface": "asset-map-detail",
  "initiatorRole": "compliance",
  "reviewerRole": "compliance",
  "secondConfirmRequired": true,
  "samePersonForbidden": true,
  "originalAuditImmutable": true,
  "originalRollbackImmutable": true,
  "createdAt": "2026-07-31T18:33:40.903Z",
  "writeMode": "dry-run-only"
}

{
  "initiatorSlot": "local-source-correction-initiator",
  "reviewerSlot": "local-source-correction-reviewer",
  "futureIdentityProvider": "future:ops-sso + local-source-surface-release-actor-snapshot",
  "sessionStorage": "future:httpOnly-session + immutable correction approval snapshot",
  "proofRequiredBeforeWrite": true,
  "approvalWriteDisabled": true,
  "correctionWriteDisabled": true,
  "preserveAuditDigest": true,
  "preserveRollbackDigest": true,
  "noPublicSideEffect": true
}