Architecture Cut 72 / Local Source Correction Dual Control

源图审计纠错双人确认 Dry-run

为源图发布审计 correction 事件生成双人确认 schema、角色矩阵、同人禁止和 approvalDigest。当前只读预演：approvalWritten=false，correctionEventWritten=false，auditLogMutated=false，rollbackPackageMutated=false。

Dual JSON 纠错事件纠错事务 MCP Queue MCP Document Citation Lookup 回滚包 BBS 双签范式

4双签 schema

4可校验

4同人禁止

4Approval 禁写

4approvalDigest

0实际写入

Dual Control Approval

发起人与复核人门禁

当前展示单资产/小范围双签详情。

双人确认 dry-run 可校验

元数据纠错 / 新加坡 S-REIT Harbor Block

运营台 / 运营台人审 / 批准发布 dry-run

Dual JSON

asset_visual_local_source_surface_release_audit_correction_approvalsinitiator=qareviewer=opssamePersonForbidden=truesecondConfirmRequired=true

approvalDigest5127eb521008...3795b4

correctionDigestd10465d57b63...dd08d9

rollbackDigest9fd67edac1ff...f7e797

dualControlDryRun=truedualControlWriteDisabled=trueapprovalWritten=falsecorrectionEventWritten=falseauditLogMutated=falserollbackPackageMutated=falsesessionCreated=falsemcpIndexWritten=falsetradingUseDisabled=true

Role Matrixops: initiate=true / review=true / 负责发起源图消费面纠错、核对回滚包和运营变更单，但不能绕过双人确认。qa: initiate=true / review=true / 负责 digest、source markers、consumer surface 与只读展示一致性复核。editor: initiate=true / review=true / 负责官网、BBS、AI 脚注和公开文案 redaction 口径复核。compliance: initiate=false / review=false / 负责 redaction、策略阻断、非投资建议和 no-trading 红线。admin: initiate=true / review=true / 可以填任一槽位，但不能绕过同人禁止、原审计不可变、原回滚包不可变和写入禁用。

{
  "table": "asset_visual_local_source_surface_release_audit_correction_approvals",
  "schemaVersion": "2026-07-local-source-surface-release-audit-correction-dual-control-v1",
  "approvalId": "asset-visual-local-source-surface-release-audit-correction-dual-control-sg-commercial-harbor-block-ops-console-approve-surface-release-dry-run",
  "approvalType": "local-source-surface-release-audit-correction-dual-control",
  "correctionEventId": "asset-visual-local-source-surface-release-audit-correction-sg-commercial-harbor-block-ops-console-approve-surface-release-dry-run",
  "correctionDigest": "d10465d57b6386d29fa1caa598e597afb95db8f926a9e231e1c1154ee3dd08d9",
  "targetAuditLogId": "asset-visual-local-source-surface-release-action-audit-sg-commercial-harbor-block-ops-console-approve-surface-release-dry-run",
  "targetAuditDigest": "47c04121cdeaa8dd51dfd912a8050d8f8f0eb4d20312d8194782d411ace99ba5",
  "targetRollbackPackageId": "asset-visual-local-source-surface-release-rollback-sg-commercial-harbor-block-ops-console-approve-surface-release-dry-run",
  "targetRollbackDigest": "9fd67edac1ffc119a30bdfe458cd70dcbeecd90d2035c6af8de49397f0f7e797",
  "actionDigest": "676d54b45e08be3d695aeade9cc9b25ad7c055335e99f0141763ddf654886d8f",
  "releaseDigest": "9571f4671cf0af56420d4f06267ca9314c2af94b73464c67d98708f47cf69309",
  "sourceManifestDigest": "aba7b98950399c9e5f56fe4a633aa7067aafe9483e35fc3cf2262bc3206cd108",
  "correctionType": "metadata-correction",
  "consumer": "ops-console",
  "surface": "ops-console",
  "initiatorRole": "qa",
  "reviewerRole": "ops",
  "secondConfirmRequired": true,
  "samePersonForbidden": true,
  "originalAuditImmutable": true,
  "originalRollbackImmutable": true,
  "createdAt": "2026-07-31T18:33:40.903Z",
  "writeMode": "dry-run-only"
}

{
  "initiatorSlot": "local-source-correction-initiator",
  "reviewerSlot": "local-source-correction-reviewer",
  "futureIdentityProvider": "future:ops-sso + local-source-surface-release-actor-snapshot",
  "sessionStorage": "future:httpOnly-session + immutable correction approval snapshot",
  "proofRequiredBeforeWrite": true,
  "approvalWriteDisabled": true,
  "correctionWriteDisabled": true,
  "preserveAuditDigest": true,
  "preserveRollbackDigest": true,
  "noPublicSideEffect": true
}

双签详情 Tx Fix Fix Queue Fix Document 纠错事件回滚包资产详情

双人确认 dry-run 可校验

元数据纠错 / 新加坡 S-REIT Harbor Block

运营台 / 运营台人审 / 请求文案修复

Dual JSON

asset_visual_local_source_surface_release_audit_correction_approvalsinitiator=qareviewer=opssamePersonForbidden=truesecondConfirmRequired=true

approvalDigestc3774ea3304f...057306

correctionDigeste91f0f4a3ece...4d99c6

rollbackDigestd20df1f8ea3d...1623a1

{
  "table": "asset_visual_local_source_surface_release_audit_correction_approvals",
  "schemaVersion": "2026-07-local-source-surface-release-audit-correction-dual-control-v1",
  "approvalId": "asset-visual-local-source-surface-release-audit-correction-dual-control-sg-commercial-harbor-block-ops-console-request-surface-copy-fix",
  "approvalType": "local-source-surface-release-audit-correction-dual-control",
  "correctionEventId": "asset-visual-local-source-surface-release-audit-correction-sg-commercial-harbor-block-ops-console-request-surface-copy-fix",
  "correctionDigest": "e91f0f4a3ecee0cbf28d5bb76fc82b598a9e34d6b18f83b43ede1c17254d99c6",
  "targetAuditLogId": "asset-visual-local-source-surface-release-action-audit-sg-commercial-harbor-block-ops-console-request-surface-copy-fix",
  "targetAuditDigest": "2a5a83dbbc5606f91302acd04fc0d1d0d2a512f0e70fa6f73038e0f962e1ede8",
  "targetRollbackPackageId": "asset-visual-local-source-surface-release-rollback-sg-commercial-harbor-block-ops-console-request-surface-copy-fix",
  "targetRollbackDigest": "d20df1f8ea3d2f32e4be66d45b70ef76e5fc28553084dbe02dcd0b9b6d1623a1",
  "actionDigest": "1cfdbd0969f58c42dbfaae4341525f70f766112d39e409f9eef4863bd97ce3e9",
  "releaseDigest": "9571f4671cf0af56420d4f06267ca9314c2af94b73464c67d98708f47cf69309",
  "sourceManifestDigest": "aba7b98950399c9e5f56fe4a633aa7067aafe9483e35fc3cf2262bc3206cd108",
  "correctionType": "metadata-correction",
  "consumer": "ops-console",
  "surface": "ops-console",
  "initiatorRole": "qa",
  "reviewerRole": "ops",
  "secondConfirmRequired": true,
  "samePersonForbidden": true,
  "originalAuditImmutable": true,
  "originalRollbackImmutable": true,
  "createdAt": "2026-07-31T18:33:40.903Z",
  "writeMode": "dry-run-only"
}

{
  "initiatorSlot": "local-source-correction-initiator",
  "reviewerSlot": "local-source-correction-reviewer",
  "futureIdentityProvider": "future:ops-sso + local-source-surface-release-actor-snapshot",
  "sessionStorage": "future:httpOnly-session + immutable correction approval snapshot",
  "proofRequiredBeforeWrite": true,
  "approvalWriteDisabled": true,
  "correctionWriteDisabled": true,
  "preserveAuditDigest": true,
  "preserveRollbackDigest": true,
  "noPublicSideEffect": true
}

双签详情 Tx Fix Fix Queue Fix Document 纠错事件回滚包资产详情

双人确认 dry-run 可校验

策略说明 / 新加坡 S-REIT Harbor Block

运营台 / 运营台人审 / 请求风控复核

Dual JSON

asset_visual_local_source_surface_release_audit_correction_approvalsinitiator=opsreviewer=compliancesamePersonForbidden=truesecondConfirmRequired=true

approvalDigestcb9904969860...c4347e

correctionDigestc2417baee40f...4f7d2b

rollbackDigestecd033f20b00...dc8d36

Role Matrixops: initiate=true / review=true / 负责发起源图消费面纠错、核对回滚包和运营变更单，但不能绕过双人确认。qa: initiate=false / review=false / 负责 digest、source markers、consumer surface 与只读展示一致性复核。editor: initiate=false / review=false / 负责官网、BBS、AI 脚注和公开文案 redaction 口径复核。compliance: initiate=true / review=true / 负责 redaction、策略阻断、非投资建议和 no-trading 红线。admin: initiate=true / review=true / 可以填任一槽位，但不能绕过同人禁止、原审计不可变、原回滚包不可变和写入禁用。

{
  "table": "asset_visual_local_source_surface_release_audit_correction_approvals",
  "schemaVersion": "2026-07-local-source-surface-release-audit-correction-dual-control-v1",
  "approvalId": "asset-visual-local-source-surface-release-audit-correction-dual-control-sg-commercial-harbor-block-ops-console-request-risk-review",
  "approvalType": "local-source-surface-release-audit-correction-dual-control",
  "correctionEventId": "asset-visual-local-source-surface-release-audit-correction-sg-commercial-harbor-block-ops-console-request-risk-review",
  "correctionDigest": "c2417baee40f3293ca0b37c67ebb494e15802aafb31f57a9ba12efa17b4f7d2b",
  "targetAuditLogId": "asset-visual-local-source-surface-release-action-audit-sg-commercial-harbor-block-ops-console-request-risk-review",
  "targetAuditDigest": "52e601b01c2214ad33820ee6cd41e6ae91cbfe72d48c1d88551e0b62cd5029b1",
  "targetRollbackPackageId": "asset-visual-local-source-surface-release-rollback-sg-commercial-harbor-block-ops-console-request-risk-review",
  "targetRollbackDigest": "ecd033f20b005ee96566c35bbe07cca36be893ccf336604db0e90ab18fdc8d36",
  "actionDigest": "b4883d22b0c18c5ab6f010ba65a85a4fe70603c8c9a45996bf61c192a135c770",
  "releaseDigest": "9571f4671cf0af56420d4f06267ca9314c2af94b73464c67d98708f47cf69309",
  "sourceManifestDigest": "aba7b98950399c9e5f56fe4a633aa7067aafe9483e35fc3cf2262bc3206cd108",
  "correctionType": "policy-blocker-note",
  "consumer": "ops-console",
  "surface": "ops-console",
  "initiatorRole": "ops",
  "reviewerRole": "compliance",
  "secondConfirmRequired": true,
  "samePersonForbidden": true,
  "originalAuditImmutable": true,
  "originalRollbackImmutable": true,
  "createdAt": "2026-07-31T18:33:40.903Z",
  "writeMode": "dry-run-only"
}

{
  "initiatorSlot": "local-source-correction-initiator",
  "reviewerSlot": "local-source-correction-reviewer",
  "futureIdentityProvider": "future:ops-sso + local-source-surface-release-actor-snapshot",
  "sessionStorage": "future:httpOnly-session + immutable correction approval snapshot",
  "proofRequiredBeforeWrite": true,
  "approvalWriteDisabled": true,
  "correctionWriteDisabled": true,
  "preserveAuditDigest": true,
  "preserveRollbackDigest": true,
  "noPublicSideEffect": true
}

双签详情 Tx Fix Fix Queue Fix Document 纠错事件回滚包资产详情

双人确认 dry-run 可校验

Redaction 请求 / 新加坡 S-REIT Harbor Block

运营台 / 运营台人审 / 拒绝发布

Dual JSON

asset_visual_local_source_surface_release_audit_correction_approvalsinitiator=compliancereviewer=compliancesamePersonForbidden=truesecondConfirmRequired=true

approvalDigeste4f7d0b93412...9ea76e

correctionDigeste2b1093f94c6...af858b

rollbackDigest953ac453833b...2c50bd

Role Matrixops: initiate=true / review=false / 负责发起源图消费面纠错、核对回滚包和运营变更单，但不能绕过双人确认。qa: initiate=true / review=false / 负责 digest、source markers、consumer surface 与只读展示一致性复核。editor: initiate=true / review=true / 负责官网、BBS、AI 脚注和公开文案 redaction 口径复核。compliance: initiate=true / review=true / 负责 redaction、策略阻断、非投资建议和 no-trading 红线。admin: initiate=true / review=true / 可以填任一槽位，但不能绕过同人禁止、原审计不可变、原回滚包不可变和写入禁用。

{
  "table": "asset_visual_local_source_surface_release_audit_correction_approvals",
  "schemaVersion": "2026-07-local-source-surface-release-audit-correction-dual-control-v1",
  "approvalId": "asset-visual-local-source-surface-release-audit-correction-dual-control-sg-commercial-harbor-block-ops-console-reject-surface-release",
  "approvalType": "local-source-surface-release-audit-correction-dual-control",
  "correctionEventId": "asset-visual-local-source-surface-release-audit-correction-sg-commercial-harbor-block-ops-console-reject-surface-release",
  "correctionDigest": "e2b1093f94c66e0580b74aa4b41f2778893dea49aae6faa082da66cc87af858b",
  "targetAuditLogId": "asset-visual-local-source-surface-release-action-audit-sg-commercial-harbor-block-ops-console-reject-surface-release",
  "targetAuditDigest": "8c9ff5727d2afe943786936936f0575123547af7a4718b205b88cacef80cb69f",
  "targetRollbackPackageId": "asset-visual-local-source-surface-release-rollback-sg-commercial-harbor-block-ops-console-reject-surface-release",
  "targetRollbackDigest": "953ac453833bbf391988a812e02eaf0270c4322b5755fc37db6e76d53d2c50bd",
  "actionDigest": "b53ea8047c9ba34ef29282702e97fc3982346190d80849a601be1d9a65d8dd40",
  "releaseDigest": "9571f4671cf0af56420d4f06267ca9314c2af94b73464c67d98708f47cf69309",
  "sourceManifestDigest": "aba7b98950399c9e5f56fe4a633aa7067aafe9483e35fc3cf2262bc3206cd108",
  "correctionType": "redaction-request",
  "consumer": "ops-console",
  "surface": "ops-console",
  "initiatorRole": "compliance",
  "reviewerRole": "compliance",
  "secondConfirmRequired": true,
  "samePersonForbidden": true,
  "originalAuditImmutable": true,
  "originalRollbackImmutable": true,
  "createdAt": "2026-07-31T18:33:40.903Z",
  "writeMode": "dry-run-only"
}

{
  "initiatorSlot": "local-source-correction-initiator",
  "reviewerSlot": "local-source-correction-reviewer",
  "futureIdentityProvider": "future:ops-sso + local-source-surface-release-actor-snapshot",
  "sessionStorage": "future:httpOnly-session + immutable correction approval snapshot",
  "proofRequiredBeforeWrite": true,
  "approvalWriteDisabled": true,
  "correctionWriteDisabled": true,
  "preserveAuditDigest": true,
  "preserveRollbackDigest": true,
  "noPublicSideEffect": true
}