Architecture Cut 72 / Local Source Correction Dual Control

源图审计纠错双人确认 Dry-run

为源图发布审计 correction 事件生成双人确认 schema、角色矩阵、同人禁止和 approvalDigest。 当前只读预演:approvalWritten=false,correctionEventWritten=false,auditLogMutated=false,rollbackPackageMutated=false。

全部双签双人确认可校验需要复核人需要确认字段需要纠错事件策略阻断元数据纠错Redaction 请求策略说明批准 dry-run文案修复风控复核拒绝发布官网Pixel Atlas资产地图BBSAIVR运营台NFT 主图地图 Pin新闻封面BBS 缩略图VR 牌匾中国内地美国日本新加坡香港澳大利亚英国加拿大印度欧盟
4双签 schema
4可校验
4同人禁止
4Approval 禁写
4approvalDigest
0实际写入
Dual Control Approval

发起人与复核人门禁

当前展示单资产/小范围双签详情。

双人确认 dry-run 可校验

元数据纠错 / 美国数据中心 Grid Node

运营台 / 运营台人审 / 批准发布 dry-run

Dual JSON
asset_visual_local_source_surface_release_audit_correction_approvalsinitiator=qareviewer=opssamePersonForbidden=truesecondConfirmRequired=true
approvalDigest88396bc9948f...a963fc
correctionDigest01444dc5d44f...77ce49
rollbackDigest9e20eb303d25...57f8c3
dualControlDryRun=truedualControlWriteDisabled=trueapprovalWritten=falsecorrectionEventWritten=falseauditLogMutated=falserollbackPackageMutated=falsesessionCreated=falsemcpIndexWritten=falsetradingUseDisabled=true
Role Matrixops: initiate=true / review=true / 负责发起源图消费面纠错、核对回滚包和运营变更单,但不能绕过双人确认。qa: initiate=true / review=true / 负责 digest、source markers、consumer surface 与只读展示一致性复核。editor: initiate=true / review=true / 负责官网、BBS、AI 脚注和公开文案 redaction 口径复核。compliance: initiate=false / review=false / 负责 redaction、策略阻断、非投资建议和 no-trading 红线。admin: initiate=true / review=true / 可以填任一槽位,但不能绕过同人禁止、原审计不可变、原回滚包不可变和写入禁用。
{
  "table": "asset_visual_local_source_surface_release_audit_correction_approvals",
  "schemaVersion": "2026-07-local-source-surface-release-audit-correction-dual-control-v1",
  "approvalId": "asset-visual-local-source-surface-release-audit-correction-dual-control-us-data-center-grid-node-ops-console-approve-surface-release-dry-run",
  "approvalType": "local-source-surface-release-audit-correction-dual-control",
  "correctionEventId": "asset-visual-local-source-surface-release-audit-correction-us-data-center-grid-node-ops-console-approve-surface-release-dry-run",
  "correctionDigest": "01444dc5d44f54d6e9dab756cfe02830522d1ba765dc1080d782bc7ba677ce49",
  "targetAuditLogId": "asset-visual-local-source-surface-release-action-audit-us-data-center-grid-node-ops-console-approve-surface-release-dry-run",
  "targetAuditDigest": "657e7e2f6b05fff2f4fff483231c478f9aea77fd6381f8d9322388758354887a",
  "targetRollbackPackageId": "asset-visual-local-source-surface-release-rollback-us-data-center-grid-node-ops-console-approve-surface-release-dry-run",
  "targetRollbackDigest": "9e20eb303d25d1bf6134393f4ea7acc97d99daa54ae6612bd35347037d57f8c3",
  "actionDigest": "bc74aea7644f63e84e6d98bdf4a8e399f7bb3e97d4ebbfe53ff857a4cadcc7a5",
  "releaseDigest": "78096bdc508147549c6165bd10ddce2fa0e01c5cd90b3cc335edd7c302ac9041",
  "sourceManifestDigest": "bf991e64d79f2ccfe624cd3e1015aa7c51006d034fe6f0b0bb67151840235036",
  "correctionType": "metadata-correction",
  "consumer": "ops-console",
  "surface": "ops-console",
  "initiatorRole": "qa",
  "reviewerRole": "ops",
  "secondConfirmRequired": true,
  "samePersonForbidden": true,
  "originalAuditImmutable": true,
  "originalRollbackImmutable": true,
  "createdAt": "2026-07-31T18:33:40.903Z",
  "writeMode": "dry-run-only"
}
{
  "initiatorSlot": "local-source-correction-initiator",
  "reviewerSlot": "local-source-correction-reviewer",
  "futureIdentityProvider": "future:ops-sso + local-source-surface-release-actor-snapshot",
  "sessionStorage": "future:httpOnly-session + immutable correction approval snapshot",
  "proofRequiredBeforeWrite": true,
  "approvalWriteDisabled": true,
  "correctionWriteDisabled": true,
  "preserveAuditDigest": true,
  "preserveRollbackDigest": true,
  "noPublicSideEffect": true
}
双人确认 dry-run 可校验

元数据纠错 / 美国数据中心 Grid Node

运营台 / 运营台人审 / 请求文案修复

Dual JSON
asset_visual_local_source_surface_release_audit_correction_approvalsinitiator=qareviewer=opssamePersonForbidden=truesecondConfirmRequired=true
approvalDigest8dcd1024139a...ff6248
correctionDigesta45ec04e7441...38362b
rollbackDigest77d177ec4992...450692
dualControlDryRun=truedualControlWriteDisabled=trueapprovalWritten=falsecorrectionEventWritten=falseauditLogMutated=falserollbackPackageMutated=falsesessionCreated=falsemcpIndexWritten=falsetradingUseDisabled=true
Role Matrixops: initiate=true / review=true / 负责发起源图消费面纠错、核对回滚包和运营变更单,但不能绕过双人确认。qa: initiate=true / review=true / 负责 digest、source markers、consumer surface 与只读展示一致性复核。editor: initiate=true / review=true / 负责官网、BBS、AI 脚注和公开文案 redaction 口径复核。compliance: initiate=false / review=false / 负责 redaction、策略阻断、非投资建议和 no-trading 红线。admin: initiate=true / review=true / 可以填任一槽位,但不能绕过同人禁止、原审计不可变、原回滚包不可变和写入禁用。
{
  "table": "asset_visual_local_source_surface_release_audit_correction_approvals",
  "schemaVersion": "2026-07-local-source-surface-release-audit-correction-dual-control-v1",
  "approvalId": "asset-visual-local-source-surface-release-audit-correction-dual-control-us-data-center-grid-node-ops-console-request-surface-copy-fix",
  "approvalType": "local-source-surface-release-audit-correction-dual-control",
  "correctionEventId": "asset-visual-local-source-surface-release-audit-correction-us-data-center-grid-node-ops-console-request-surface-copy-fix",
  "correctionDigest": "a45ec04e7441ca3ae3a7d60851d9d5541ba1507d894d9d9f4d559db46c38362b",
  "targetAuditLogId": "asset-visual-local-source-surface-release-action-audit-us-data-center-grid-node-ops-console-request-surface-copy-fix",
  "targetAuditDigest": "445cfffd6cefb03e078cbb1b484718c7b82927118525597e8f93f89a28ab5c3c",
  "targetRollbackPackageId": "asset-visual-local-source-surface-release-rollback-us-data-center-grid-node-ops-console-request-surface-copy-fix",
  "targetRollbackDigest": "77d177ec4992b445a790a44762346c882c3536e800b4277148f99d2102450692",
  "actionDigest": "8e1f014187371d9a531e6fb921b0013de2c2becee128c95fa25cdc3716c88cc2",
  "releaseDigest": "78096bdc508147549c6165bd10ddce2fa0e01c5cd90b3cc335edd7c302ac9041",
  "sourceManifestDigest": "bf991e64d79f2ccfe624cd3e1015aa7c51006d034fe6f0b0bb67151840235036",
  "correctionType": "metadata-correction",
  "consumer": "ops-console",
  "surface": "ops-console",
  "initiatorRole": "qa",
  "reviewerRole": "ops",
  "secondConfirmRequired": true,
  "samePersonForbidden": true,
  "originalAuditImmutable": true,
  "originalRollbackImmutable": true,
  "createdAt": "2026-07-31T18:33:40.903Z",
  "writeMode": "dry-run-only"
}
{
  "initiatorSlot": "local-source-correction-initiator",
  "reviewerSlot": "local-source-correction-reviewer",
  "futureIdentityProvider": "future:ops-sso + local-source-surface-release-actor-snapshot",
  "sessionStorage": "future:httpOnly-session + immutable correction approval snapshot",
  "proofRequiredBeforeWrite": true,
  "approvalWriteDisabled": true,
  "correctionWriteDisabled": true,
  "preserveAuditDigest": true,
  "preserveRollbackDigest": true,
  "noPublicSideEffect": true
}
双人确认 dry-run 可校验

策略说明 / 美国数据中心 Grid Node

运营台 / 运营台人审 / 请求风控复核

Dual JSON
asset_visual_local_source_surface_release_audit_correction_approvalsinitiator=opsreviewer=compliancesamePersonForbidden=truesecondConfirmRequired=true
approvalDigesta0c548c04742...bdabbc
correctionDigest6a486a3cbf93...485b86
rollbackDigeste4c39bf010ca...8cff38
dualControlDryRun=truedualControlWriteDisabled=trueapprovalWritten=falsecorrectionEventWritten=falseauditLogMutated=falserollbackPackageMutated=falsesessionCreated=falsemcpIndexWritten=falsetradingUseDisabled=true
Role Matrixops: initiate=true / review=true / 负责发起源图消费面纠错、核对回滚包和运营变更单,但不能绕过双人确认。qa: initiate=false / review=false / 负责 digest、source markers、consumer surface 与只读展示一致性复核。editor: initiate=false / review=false / 负责官网、BBS、AI 脚注和公开文案 redaction 口径复核。compliance: initiate=true / review=true / 负责 redaction、策略阻断、非投资建议和 no-trading 红线。admin: initiate=true / review=true / 可以填任一槽位,但不能绕过同人禁止、原审计不可变、原回滚包不可变和写入禁用。
{
  "table": "asset_visual_local_source_surface_release_audit_correction_approvals",
  "schemaVersion": "2026-07-local-source-surface-release-audit-correction-dual-control-v1",
  "approvalId": "asset-visual-local-source-surface-release-audit-correction-dual-control-us-data-center-grid-node-ops-console-request-risk-review",
  "approvalType": "local-source-surface-release-audit-correction-dual-control",
  "correctionEventId": "asset-visual-local-source-surface-release-audit-correction-us-data-center-grid-node-ops-console-request-risk-review",
  "correctionDigest": "6a486a3cbf939ca1a8cf13ec65547377ab6932c1c0926e248db0265edb485b86",
  "targetAuditLogId": "asset-visual-local-source-surface-release-action-audit-us-data-center-grid-node-ops-console-request-risk-review",
  "targetAuditDigest": "1b8c8d33a55abc01f87b7014ed876ce757d8bd5608f3c899cda22ca1d07d1bc9",
  "targetRollbackPackageId": "asset-visual-local-source-surface-release-rollback-us-data-center-grid-node-ops-console-request-risk-review",
  "targetRollbackDigest": "e4c39bf010ca5ba868ed542cc933744cca9f42f9be5ff02ee38f95f68b8cff38",
  "actionDigest": "b32fd17ac9c75a5cc66ef156031f3fc0b92f14bdc8df18e389370807291027a6",
  "releaseDigest": "78096bdc508147549c6165bd10ddce2fa0e01c5cd90b3cc335edd7c302ac9041",
  "sourceManifestDigest": "bf991e64d79f2ccfe624cd3e1015aa7c51006d034fe6f0b0bb67151840235036",
  "correctionType": "policy-blocker-note",
  "consumer": "ops-console",
  "surface": "ops-console",
  "initiatorRole": "ops",
  "reviewerRole": "compliance",
  "secondConfirmRequired": true,
  "samePersonForbidden": true,
  "originalAuditImmutable": true,
  "originalRollbackImmutable": true,
  "createdAt": "2026-07-31T18:33:40.903Z",
  "writeMode": "dry-run-only"
}
{
  "initiatorSlot": "local-source-correction-initiator",
  "reviewerSlot": "local-source-correction-reviewer",
  "futureIdentityProvider": "future:ops-sso + local-source-surface-release-actor-snapshot",
  "sessionStorage": "future:httpOnly-session + immutable correction approval snapshot",
  "proofRequiredBeforeWrite": true,
  "approvalWriteDisabled": true,
  "correctionWriteDisabled": true,
  "preserveAuditDigest": true,
  "preserveRollbackDigest": true,
  "noPublicSideEffect": true
}
双人确认 dry-run 可校验

Redaction 请求 / 美国数据中心 Grid Node

运营台 / 运营台人审 / 拒绝发布

Dual JSON
asset_visual_local_source_surface_release_audit_correction_approvalsinitiator=compliancereviewer=compliancesamePersonForbidden=truesecondConfirmRequired=true
approvalDigest069064d1d93e...b14b32
correctionDigest768bf34e4197...402cb0
rollbackDigeste0dd04779ea0...babeb8
dualControlDryRun=truedualControlWriteDisabled=trueapprovalWritten=falsecorrectionEventWritten=falseauditLogMutated=falserollbackPackageMutated=falsesessionCreated=falsemcpIndexWritten=falsetradingUseDisabled=true
Role Matrixops: initiate=true / review=false / 负责发起源图消费面纠错、核对回滚包和运营变更单,但不能绕过双人确认。qa: initiate=true / review=false / 负责 digest、source markers、consumer surface 与只读展示一致性复核。editor: initiate=true / review=true / 负责官网、BBS、AI 脚注和公开文案 redaction 口径复核。compliance: initiate=true / review=true / 负责 redaction、策略阻断、非投资建议和 no-trading 红线。admin: initiate=true / review=true / 可以填任一槽位,但不能绕过同人禁止、原审计不可变、原回滚包不可变和写入禁用。
{
  "table": "asset_visual_local_source_surface_release_audit_correction_approvals",
  "schemaVersion": "2026-07-local-source-surface-release-audit-correction-dual-control-v1",
  "approvalId": "asset-visual-local-source-surface-release-audit-correction-dual-control-us-data-center-grid-node-ops-console-reject-surface-release",
  "approvalType": "local-source-surface-release-audit-correction-dual-control",
  "correctionEventId": "asset-visual-local-source-surface-release-audit-correction-us-data-center-grid-node-ops-console-reject-surface-release",
  "correctionDigest": "768bf34e4197b13e673d97d0aa5f36d25ec3b1ae29bde2c84fdd434273402cb0",
  "targetAuditLogId": "asset-visual-local-source-surface-release-action-audit-us-data-center-grid-node-ops-console-reject-surface-release",
  "targetAuditDigest": "b060e3c943158852b955f657d9f45afcc7eca995e354022153f516a849c60ee3",
  "targetRollbackPackageId": "asset-visual-local-source-surface-release-rollback-us-data-center-grid-node-ops-console-reject-surface-release",
  "targetRollbackDigest": "e0dd04779ea0938714b2eb8f4ec6ee049a1133dde18d77ab6de3842709babeb8",
  "actionDigest": "3d625719a38392f1715831d1f94cef812f88dbbb6f5825f5e686ae1fc13c3050",
  "releaseDigest": "78096bdc508147549c6165bd10ddce2fa0e01c5cd90b3cc335edd7c302ac9041",
  "sourceManifestDigest": "bf991e64d79f2ccfe624cd3e1015aa7c51006d034fe6f0b0bb67151840235036",
  "correctionType": "redaction-request",
  "consumer": "ops-console",
  "surface": "ops-console",
  "initiatorRole": "compliance",
  "reviewerRole": "compliance",
  "secondConfirmRequired": true,
  "samePersonForbidden": true,
  "originalAuditImmutable": true,
  "originalRollbackImmutable": true,
  "createdAt": "2026-07-31T18:33:40.903Z",
  "writeMode": "dry-run-only"
}
{
  "initiatorSlot": "local-source-correction-initiator",
  "reviewerSlot": "local-source-correction-reviewer",
  "futureIdentityProvider": "future:ops-sso + local-source-surface-release-actor-snapshot",
  "sessionStorage": "future:httpOnly-session + immutable correction approval snapshot",
  "proofRequiredBeforeWrite": true,
  "approvalWriteDisabled": true,
  "correctionWriteDisabled": true,
  "preserveAuditDigest": true,
  "preserveRollbackDigest": true,
  "noPublicSideEffect": true
}