Architecture Cut 72 / Local Source Correction Dual Control

源图审计纠错双人确认 Dry-run

为源图发布审计 correction 事件生成双人确认 schema、角色矩阵、同人禁止和 approvalDigest。当前只读预演：approvalWritten=false，correctionEventWritten=false，auditLogMutated=false，rollbackPackageMutated=false。

Dual JSON 纠错事件纠错事务 MCP Queue MCP Document Citation Lookup 回滚包 BBS 双签范式

4双签 schema

4可校验

4同人禁止

4Approval 禁写

4approvalDigest

0实际写入

Dual Control Approval

发起人与复核人门禁

当前展示单资产/小范围双签详情。

双人确认 dry-run 可校验

元数据纠错 / 香港 Office Harbor Tower

运营台 / 运营台人审 / 批准发布 dry-run

Dual JSON

asset_visual_local_source_surface_release_audit_correction_approvalsinitiator=qareviewer=opssamePersonForbidden=truesecondConfirmRequired=true

approvalDigest283675b477f5...b50059

correctionDigestf03c162d0e62...37679e

rollbackDigestfc311da22644...bd77d5

dualControlDryRun=truedualControlWriteDisabled=trueapprovalWritten=falsecorrectionEventWritten=falseauditLogMutated=falserollbackPackageMutated=falsesessionCreated=falsemcpIndexWritten=falsetradingUseDisabled=true

Role Matrixops: initiate=true / review=true / 负责发起源图消费面纠错、核对回滚包和运营变更单，但不能绕过双人确认。qa: initiate=true / review=true / 负责 digest、source markers、consumer surface 与只读展示一致性复核。editor: initiate=true / review=true / 负责官网、BBS、AI 脚注和公开文案 redaction 口径复核。compliance: initiate=false / review=false / 负责 redaction、策略阻断、非投资建议和 no-trading 红线。admin: initiate=true / review=true / 可以填任一槽位，但不能绕过同人禁止、原审计不可变、原回滚包不可变和写入禁用。

{
  "table": "asset_visual_local_source_surface_release_audit_correction_approvals",
  "schemaVersion": "2026-07-local-source-surface-release-audit-correction-dual-control-v1",
  "approvalId": "asset-visual-local-source-surface-release-audit-correction-dual-control-hk-office-harbor-tower-ops-console-approve-surface-release-dry-run",
  "approvalType": "local-source-surface-release-audit-correction-dual-control",
  "correctionEventId": "asset-visual-local-source-surface-release-audit-correction-hk-office-harbor-tower-ops-console-approve-surface-release-dry-run",
  "correctionDigest": "f03c162d0e6222447efeb0bb579c2354c2957fc16485a0b671e39bf02537679e",
  "targetAuditLogId": "asset-visual-local-source-surface-release-action-audit-hk-office-harbor-tower-ops-console-approve-surface-release-dry-run",
  "targetAuditDigest": "df04926598037452995866a632f4d097c1605e7c03766d5471692775774558fc",
  "targetRollbackPackageId": "asset-visual-local-source-surface-release-rollback-hk-office-harbor-tower-ops-console-approve-surface-release-dry-run",
  "targetRollbackDigest": "fc311da226446c7599cddb99f27a64a6902e43cfe6eb58e8684b281e86bd77d5",
  "actionDigest": "52c7f3c6a5c4005208aae7b2aacf72a35456f17ad2cda3a5dd8eccc0214ff763",
  "releaseDigest": "28cf06dd475ef0a294373c060cc00718c43ef1b9c9110e6f95a75cfb54eeeeb4",
  "sourceManifestDigest": "de78fc03be1bb48c27f079b66399acd8d34c938366b2a98d8c3263d54d6eff53",
  "correctionType": "metadata-correction",
  "consumer": "ops-console",
  "surface": "ops-console",
  "initiatorRole": "qa",
  "reviewerRole": "ops",
  "secondConfirmRequired": true,
  "samePersonForbidden": true,
  "originalAuditImmutable": true,
  "originalRollbackImmutable": true,
  "createdAt": "2026-07-31T18:33:40.903Z",
  "writeMode": "dry-run-only"
}

{
  "initiatorSlot": "local-source-correction-initiator",
  "reviewerSlot": "local-source-correction-reviewer",
  "futureIdentityProvider": "future:ops-sso + local-source-surface-release-actor-snapshot",
  "sessionStorage": "future:httpOnly-session + immutable correction approval snapshot",
  "proofRequiredBeforeWrite": true,
  "approvalWriteDisabled": true,
  "correctionWriteDisabled": true,
  "preserveAuditDigest": true,
  "preserveRollbackDigest": true,
  "noPublicSideEffect": true
}

双签详情 Tx Fix Fix Queue Fix Document 纠错事件回滚包资产详情

双人确认 dry-run 可校验

元数据纠错 / 香港 Office Harbor Tower

运营台 / 运营台人审 / 请求文案修复

Dual JSON

asset_visual_local_source_surface_release_audit_correction_approvalsinitiator=qareviewer=opssamePersonForbidden=truesecondConfirmRequired=true

approvalDigestf795d550d650...0deb05

correctionDigest333def2338df...dcfbae

rollbackDigestd04b84208486...cb57cb

{
  "table": "asset_visual_local_source_surface_release_audit_correction_approvals",
  "schemaVersion": "2026-07-local-source-surface-release-audit-correction-dual-control-v1",
  "approvalId": "asset-visual-local-source-surface-release-audit-correction-dual-control-hk-office-harbor-tower-ops-console-request-surface-copy-fix",
  "approvalType": "local-source-surface-release-audit-correction-dual-control",
  "correctionEventId": "asset-visual-local-source-surface-release-audit-correction-hk-office-harbor-tower-ops-console-request-surface-copy-fix",
  "correctionDigest": "333def2338df08c1e8ac72b0090ec2dca497c04eeb170f82301353ab33dcfbae",
  "targetAuditLogId": "asset-visual-local-source-surface-release-action-audit-hk-office-harbor-tower-ops-console-request-surface-copy-fix",
  "targetAuditDigest": "4e860902d14345409156291c093e99664df01e5a2abc221c6c36dcd28ecf5fa5",
  "targetRollbackPackageId": "asset-visual-local-source-surface-release-rollback-hk-office-harbor-tower-ops-console-request-surface-copy-fix",
  "targetRollbackDigest": "d04b84208486e416c0b071ce1ab88d7f8c506b0d1afe2b573b09f233ffcb57cb",
  "actionDigest": "801c2eb21a112bedcfd4ca07d851c587784fabc71d9d1d42de6a1f5f6655ab00",
  "releaseDigest": "28cf06dd475ef0a294373c060cc00718c43ef1b9c9110e6f95a75cfb54eeeeb4",
  "sourceManifestDigest": "de78fc03be1bb48c27f079b66399acd8d34c938366b2a98d8c3263d54d6eff53",
  "correctionType": "metadata-correction",
  "consumer": "ops-console",
  "surface": "ops-console",
  "initiatorRole": "qa",
  "reviewerRole": "ops",
  "secondConfirmRequired": true,
  "samePersonForbidden": true,
  "originalAuditImmutable": true,
  "originalRollbackImmutable": true,
  "createdAt": "2026-07-31T18:33:40.903Z",
  "writeMode": "dry-run-only"
}

{
  "initiatorSlot": "local-source-correction-initiator",
  "reviewerSlot": "local-source-correction-reviewer",
  "futureIdentityProvider": "future:ops-sso + local-source-surface-release-actor-snapshot",
  "sessionStorage": "future:httpOnly-session + immutable correction approval snapshot",
  "proofRequiredBeforeWrite": true,
  "approvalWriteDisabled": true,
  "correctionWriteDisabled": true,
  "preserveAuditDigest": true,
  "preserveRollbackDigest": true,
  "noPublicSideEffect": true
}

双签详情 Tx Fix Fix Queue Fix Document 纠错事件回滚包资产详情

双人确认 dry-run 可校验

策略说明 / 香港 Office Harbor Tower

运营台 / 运营台人审 / 请求风控复核

Dual JSON

asset_visual_local_source_surface_release_audit_correction_approvalsinitiator=opsreviewer=compliancesamePersonForbidden=truesecondConfirmRequired=true

approvalDigest45de3c62e8a7...5672f1

correctionDigest4befc87bc2ec...7b0b2f

rollbackDigeste6b49924d0aa...4bd130

Role Matrixops: initiate=true / review=true / 负责发起源图消费面纠错、核对回滚包和运营变更单，但不能绕过双人确认。qa: initiate=false / review=false / 负责 digest、source markers、consumer surface 与只读展示一致性复核。editor: initiate=false / review=false / 负责官网、BBS、AI 脚注和公开文案 redaction 口径复核。compliance: initiate=true / review=true / 负责 redaction、策略阻断、非投资建议和 no-trading 红线。admin: initiate=true / review=true / 可以填任一槽位，但不能绕过同人禁止、原审计不可变、原回滚包不可变和写入禁用。

{
  "table": "asset_visual_local_source_surface_release_audit_correction_approvals",
  "schemaVersion": "2026-07-local-source-surface-release-audit-correction-dual-control-v1",
  "approvalId": "asset-visual-local-source-surface-release-audit-correction-dual-control-hk-office-harbor-tower-ops-console-request-risk-review",
  "approvalType": "local-source-surface-release-audit-correction-dual-control",
  "correctionEventId": "asset-visual-local-source-surface-release-audit-correction-hk-office-harbor-tower-ops-console-request-risk-review",
  "correctionDigest": "4befc87bc2ecca399502eae848e102ca46b973ac324dac2839bab1fcd87b0b2f",
  "targetAuditLogId": "asset-visual-local-source-surface-release-action-audit-hk-office-harbor-tower-ops-console-request-risk-review",
  "targetAuditDigest": "f6864eb64d430fa1eacdbaf2dd830f320304d035d0a3666f6e6ea0fe75812848",
  "targetRollbackPackageId": "asset-visual-local-source-surface-release-rollback-hk-office-harbor-tower-ops-console-request-risk-review",
  "targetRollbackDigest": "e6b49924d0aa9d93d3b3443ede515fd08ba3af5278cf0802f75befb6304bd130",
  "actionDigest": "a2c3a2a7cef072f24b4e5661d2382c3f75c7d9ee34dc17115568feffe7e42ab0",
  "releaseDigest": "28cf06dd475ef0a294373c060cc00718c43ef1b9c9110e6f95a75cfb54eeeeb4",
  "sourceManifestDigest": "de78fc03be1bb48c27f079b66399acd8d34c938366b2a98d8c3263d54d6eff53",
  "correctionType": "policy-blocker-note",
  "consumer": "ops-console",
  "surface": "ops-console",
  "initiatorRole": "ops",
  "reviewerRole": "compliance",
  "secondConfirmRequired": true,
  "samePersonForbidden": true,
  "originalAuditImmutable": true,
  "originalRollbackImmutable": true,
  "createdAt": "2026-07-31T18:33:40.903Z",
  "writeMode": "dry-run-only"
}

{
  "initiatorSlot": "local-source-correction-initiator",
  "reviewerSlot": "local-source-correction-reviewer",
  "futureIdentityProvider": "future:ops-sso + local-source-surface-release-actor-snapshot",
  "sessionStorage": "future:httpOnly-session + immutable correction approval snapshot",
  "proofRequiredBeforeWrite": true,
  "approvalWriteDisabled": true,
  "correctionWriteDisabled": true,
  "preserveAuditDigest": true,
  "preserveRollbackDigest": true,
  "noPublicSideEffect": true
}

双签详情 Tx Fix Fix Queue Fix Document 纠错事件回滚包资产详情

双人确认 dry-run 可校验

Redaction 请求 / 香港 Office Harbor Tower

运营台 / 运营台人审 / 拒绝发布

Dual JSON

asset_visual_local_source_surface_release_audit_correction_approvalsinitiator=compliancereviewer=compliancesamePersonForbidden=truesecondConfirmRequired=true

approvalDigesta32226ea83ab...967fce

correctionDigeste352058ce799...f4b92c

rollbackDigestd9081a4c1df2...adac3a

Role Matrixops: initiate=true / review=false / 负责发起源图消费面纠错、核对回滚包和运营变更单，但不能绕过双人确认。qa: initiate=true / review=false / 负责 digest、source markers、consumer surface 与只读展示一致性复核。editor: initiate=true / review=true / 负责官网、BBS、AI 脚注和公开文案 redaction 口径复核。compliance: initiate=true / review=true / 负责 redaction、策略阻断、非投资建议和 no-trading 红线。admin: initiate=true / review=true / 可以填任一槽位，但不能绕过同人禁止、原审计不可变、原回滚包不可变和写入禁用。

{
  "table": "asset_visual_local_source_surface_release_audit_correction_approvals",
  "schemaVersion": "2026-07-local-source-surface-release-audit-correction-dual-control-v1",
  "approvalId": "asset-visual-local-source-surface-release-audit-correction-dual-control-hk-office-harbor-tower-ops-console-reject-surface-release",
  "approvalType": "local-source-surface-release-audit-correction-dual-control",
  "correctionEventId": "asset-visual-local-source-surface-release-audit-correction-hk-office-harbor-tower-ops-console-reject-surface-release",
  "correctionDigest": "e352058ce79922cfd42f711238d4e1f6ef3cd4056dface78d63d3e4daaf4b92c",
  "targetAuditLogId": "asset-visual-local-source-surface-release-action-audit-hk-office-harbor-tower-ops-console-reject-surface-release",
  "targetAuditDigest": "e053bee749c50db352f7889d4b0747104dbe3797467950a9094a8d35fc9d8795",
  "targetRollbackPackageId": "asset-visual-local-source-surface-release-rollback-hk-office-harbor-tower-ops-console-reject-surface-release",
  "targetRollbackDigest": "d9081a4c1df2021225e1a8bfb6f1ed577fe4989ceeda18b597663d06c3adac3a",
  "actionDigest": "a8f29cc8483ad59db1ae251da3327e064adb5f8a3091e6026011063853fe23f1",
  "releaseDigest": "28cf06dd475ef0a294373c060cc00718c43ef1b9c9110e6f95a75cfb54eeeeb4",
  "sourceManifestDigest": "de78fc03be1bb48c27f079b66399acd8d34c938366b2a98d8c3263d54d6eff53",
  "correctionType": "redaction-request",
  "consumer": "ops-console",
  "surface": "ops-console",
  "initiatorRole": "compliance",
  "reviewerRole": "compliance",
  "secondConfirmRequired": true,
  "samePersonForbidden": true,
  "originalAuditImmutable": true,
  "originalRollbackImmutable": true,
  "createdAt": "2026-07-31T18:33:40.903Z",
  "writeMode": "dry-run-only"
}

{
  "initiatorSlot": "local-source-correction-initiator",
  "reviewerSlot": "local-source-correction-reviewer",
  "futureIdentityProvider": "future:ops-sso + local-source-surface-release-actor-snapshot",
  "sessionStorage": "future:httpOnly-session + immutable correction approval snapshot",
  "proofRequiredBeforeWrite": true,
  "approvalWriteDisabled": true,
  "correctionWriteDisabled": true,
  "preserveAuditDigest": true,
  "preserveRollbackDigest": true,
  "noPublicSideEffect": true
}