Architecture Cut 72 / Local Source Correction Dual Control

源图审计纠错双人确认 Dry-run

为源图发布审计 correction 事件生成双人确认 schema、角色矩阵、同人禁止和 approvalDigest。 当前只读预演:approvalWritten=false,correctionEventWritten=false,auditLogMutated=false,rollbackPackageMutated=false。

全部双签双人确认可校验需要复核人需要确认字段需要纠错事件策略阻断元数据纠错Redaction 请求策略说明批准 dry-run文案修复风控复核拒绝发布官网Pixel Atlas资产地图BBSAIVR运营台NFT 主图地图 Pin新闻封面BBS 缩略图VR 牌匾中国内地美国日本新加坡香港澳大利亚英国加拿大印度欧盟
4双签 schema
4可校验
4同人禁止
4Approval 禁写
4approvalDigest
0实际写入
Dual Control Approval

发起人与复核人门禁

当前展示单资产/小范围双签详情。

双人确认 dry-run 可校验

元数据纠错 / 美国数据中心 Grid Node

运营台 / 运营台人审 / 批准发布 dry-run

Dual JSON
asset_visual_local_source_surface_release_audit_correction_approvalsinitiator=qareviewer=opssamePersonForbidden=truesecondConfirmRequired=true
approvalDigestedaf2608d03d...29a749
correctionDigestf6e0848d5f78...c8e9c7
rollbackDigestbcee9aa903e0...c67fb1
dualControlDryRun=truedualControlWriteDisabled=trueapprovalWritten=falsecorrectionEventWritten=falseauditLogMutated=falserollbackPackageMutated=falsesessionCreated=falsemcpIndexWritten=falsetradingUseDisabled=true
Role Matrixops: initiate=true / review=true / 负责发起源图消费面纠错、核对回滚包和运营变更单,但不能绕过双人确认。qa: initiate=true / review=true / 负责 digest、source markers、consumer surface 与只读展示一致性复核。editor: initiate=true / review=true / 负责官网、BBS、AI 脚注和公开文案 redaction 口径复核。compliance: initiate=false / review=false / 负责 redaction、策略阻断、非投资建议和 no-trading 红线。admin: initiate=true / review=true / 可以填任一槽位,但不能绕过同人禁止、原审计不可变、原回滚包不可变和写入禁用。
{
  "table": "asset_visual_local_source_surface_release_audit_correction_approvals",
  "schemaVersion": "2026-07-local-source-surface-release-audit-correction-dual-control-v1",
  "approvalId": "asset-visual-local-source-surface-release-audit-correction-dual-control-us-data-center-grid-node-ops-console-approve-surface-release-dry-run",
  "approvalType": "local-source-surface-release-audit-correction-dual-control",
  "correctionEventId": "asset-visual-local-source-surface-release-audit-correction-us-data-center-grid-node-ops-console-approve-surface-release-dry-run",
  "correctionDigest": "f6e0848d5f7868cf28d6b853ce899830a66817bed86844f64ed9d9bdabc8e9c7",
  "targetAuditLogId": "asset-visual-local-source-surface-release-action-audit-us-data-center-grid-node-ops-console-approve-surface-release-dry-run",
  "targetAuditDigest": "7363484718bcc77b47f88dd8d2f3b053f860e1ae1688981c38d828bee22679e0",
  "targetRollbackPackageId": "asset-visual-local-source-surface-release-rollback-us-data-center-grid-node-ops-console-approve-surface-release-dry-run",
  "targetRollbackDigest": "bcee9aa903e018cc980ab3efd885c5c71af399376bc670ded10f122bf1c67fb1",
  "actionDigest": "cb77ea09251c25347920124d6be83370bca2be01807590afd6ac197d81204161",
  "releaseDigest": "437dfd5c77ee4a3c36c836b903b0d9fde1fcb01decbfff261da86545cc6c291c",
  "sourceManifestDigest": "f675cc4028057b4e58e4098e2925618b67ef55e8f66c492a5cec812ef61c39ea",
  "correctionType": "metadata-correction",
  "consumer": "ops-console",
  "surface": "ops-console",
  "initiatorRole": "qa",
  "reviewerRole": "ops",
  "secondConfirmRequired": true,
  "samePersonForbidden": true,
  "originalAuditImmutable": true,
  "originalRollbackImmutable": true,
  "createdAt": "2026-07-31T18:33:40.903Z",
  "writeMode": "dry-run-only"
}
{
  "initiatorSlot": "local-source-correction-initiator",
  "reviewerSlot": "local-source-correction-reviewer",
  "futureIdentityProvider": "future:ops-sso + local-source-surface-release-actor-snapshot",
  "sessionStorage": "future:httpOnly-session + immutable correction approval snapshot",
  "proofRequiredBeforeWrite": true,
  "approvalWriteDisabled": true,
  "correctionWriteDisabled": true,
  "preserveAuditDigest": true,
  "preserveRollbackDigest": true,
  "noPublicSideEffect": true
}
双人确认 dry-run 可校验

元数据纠错 / 美国数据中心 Grid Node

运营台 / 运营台人审 / 请求文案修复

Dual JSON
asset_visual_local_source_surface_release_audit_correction_approvalsinitiator=qareviewer=opssamePersonForbidden=truesecondConfirmRequired=true
approvalDigest82a1fc1e0514...7d64a3
correctionDigest626cb6be49ee...4e9c7c
rollbackDigest23fb63eeadfa...ad8038
dualControlDryRun=truedualControlWriteDisabled=trueapprovalWritten=falsecorrectionEventWritten=falseauditLogMutated=falserollbackPackageMutated=falsesessionCreated=falsemcpIndexWritten=falsetradingUseDisabled=true
Role Matrixops: initiate=true / review=true / 负责发起源图消费面纠错、核对回滚包和运营变更单,但不能绕过双人确认。qa: initiate=true / review=true / 负责 digest、source markers、consumer surface 与只读展示一致性复核。editor: initiate=true / review=true / 负责官网、BBS、AI 脚注和公开文案 redaction 口径复核。compliance: initiate=false / review=false / 负责 redaction、策略阻断、非投资建议和 no-trading 红线。admin: initiate=true / review=true / 可以填任一槽位,但不能绕过同人禁止、原审计不可变、原回滚包不可变和写入禁用。
{
  "table": "asset_visual_local_source_surface_release_audit_correction_approvals",
  "schemaVersion": "2026-07-local-source-surface-release-audit-correction-dual-control-v1",
  "approvalId": "asset-visual-local-source-surface-release-audit-correction-dual-control-us-data-center-grid-node-ops-console-request-surface-copy-fix",
  "approvalType": "local-source-surface-release-audit-correction-dual-control",
  "correctionEventId": "asset-visual-local-source-surface-release-audit-correction-us-data-center-grid-node-ops-console-request-surface-copy-fix",
  "correctionDigest": "626cb6be49ee4c7e517c2b93bedbf65d83a97eaebe30ba97583756247f4e9c7c",
  "targetAuditLogId": "asset-visual-local-source-surface-release-action-audit-us-data-center-grid-node-ops-console-request-surface-copy-fix",
  "targetAuditDigest": "afca79636fb227dfbe301f2ddf298551c346c44d30b8782fe3f276ea8ff74194",
  "targetRollbackPackageId": "asset-visual-local-source-surface-release-rollback-us-data-center-grid-node-ops-console-request-surface-copy-fix",
  "targetRollbackDigest": "23fb63eeadfa8393a102072f9dfe43835478cb1b0773baae1a7acdcf2bad8038",
  "actionDigest": "a2f5993d6baf1dca4c86787392aea5397739c310444cfd6b59cb9a040576dfce",
  "releaseDigest": "437dfd5c77ee4a3c36c836b903b0d9fde1fcb01decbfff261da86545cc6c291c",
  "sourceManifestDigest": "f675cc4028057b4e58e4098e2925618b67ef55e8f66c492a5cec812ef61c39ea",
  "correctionType": "metadata-correction",
  "consumer": "ops-console",
  "surface": "ops-console",
  "initiatorRole": "qa",
  "reviewerRole": "ops",
  "secondConfirmRequired": true,
  "samePersonForbidden": true,
  "originalAuditImmutable": true,
  "originalRollbackImmutable": true,
  "createdAt": "2026-07-31T18:33:40.903Z",
  "writeMode": "dry-run-only"
}
{
  "initiatorSlot": "local-source-correction-initiator",
  "reviewerSlot": "local-source-correction-reviewer",
  "futureIdentityProvider": "future:ops-sso + local-source-surface-release-actor-snapshot",
  "sessionStorage": "future:httpOnly-session + immutable correction approval snapshot",
  "proofRequiredBeforeWrite": true,
  "approvalWriteDisabled": true,
  "correctionWriteDisabled": true,
  "preserveAuditDigest": true,
  "preserveRollbackDigest": true,
  "noPublicSideEffect": true
}
双人确认 dry-run 可校验

策略说明 / 美国数据中心 Grid Node

运营台 / 运营台人审 / 请求风控复核

Dual JSON
asset_visual_local_source_surface_release_audit_correction_approvalsinitiator=opsreviewer=compliancesamePersonForbidden=truesecondConfirmRequired=true
approvalDigest1cf8b8f2b947...607fc7
correctionDigest485d886a3e67...d7f0a7
rollbackDigestcf6f3d831929...454f85
dualControlDryRun=truedualControlWriteDisabled=trueapprovalWritten=falsecorrectionEventWritten=falseauditLogMutated=falserollbackPackageMutated=falsesessionCreated=falsemcpIndexWritten=falsetradingUseDisabled=true
Role Matrixops: initiate=true / review=true / 负责发起源图消费面纠错、核对回滚包和运营变更单,但不能绕过双人确认。qa: initiate=false / review=false / 负责 digest、source markers、consumer surface 与只读展示一致性复核。editor: initiate=false / review=false / 负责官网、BBS、AI 脚注和公开文案 redaction 口径复核。compliance: initiate=true / review=true / 负责 redaction、策略阻断、非投资建议和 no-trading 红线。admin: initiate=true / review=true / 可以填任一槽位,但不能绕过同人禁止、原审计不可变、原回滚包不可变和写入禁用。
{
  "table": "asset_visual_local_source_surface_release_audit_correction_approvals",
  "schemaVersion": "2026-07-local-source-surface-release-audit-correction-dual-control-v1",
  "approvalId": "asset-visual-local-source-surface-release-audit-correction-dual-control-us-data-center-grid-node-ops-console-request-risk-review",
  "approvalType": "local-source-surface-release-audit-correction-dual-control",
  "correctionEventId": "asset-visual-local-source-surface-release-audit-correction-us-data-center-grid-node-ops-console-request-risk-review",
  "correctionDigest": "485d886a3e6704c517cb02c3b51d27e6dd67e9fd41057652860ac0e965d7f0a7",
  "targetAuditLogId": "asset-visual-local-source-surface-release-action-audit-us-data-center-grid-node-ops-console-request-risk-review",
  "targetAuditDigest": "06b2de95f6468c4229ebb14b0ef9ab6c37de53c2e4d3fda1e3826655af33d3fa",
  "targetRollbackPackageId": "asset-visual-local-source-surface-release-rollback-us-data-center-grid-node-ops-console-request-risk-review",
  "targetRollbackDigest": "cf6f3d83192968553043457535844ddcbefc8fd034220f15d7d594357c454f85",
  "actionDigest": "13e4e72c0b752a304f60bec1a7c5e68398349ff8f4a5c28e88cdc77571fa99d0",
  "releaseDigest": "437dfd5c77ee4a3c36c836b903b0d9fde1fcb01decbfff261da86545cc6c291c",
  "sourceManifestDigest": "f675cc4028057b4e58e4098e2925618b67ef55e8f66c492a5cec812ef61c39ea",
  "correctionType": "policy-blocker-note",
  "consumer": "ops-console",
  "surface": "ops-console",
  "initiatorRole": "ops",
  "reviewerRole": "compliance",
  "secondConfirmRequired": true,
  "samePersonForbidden": true,
  "originalAuditImmutable": true,
  "originalRollbackImmutable": true,
  "createdAt": "2026-07-31T18:33:40.903Z",
  "writeMode": "dry-run-only"
}
{
  "initiatorSlot": "local-source-correction-initiator",
  "reviewerSlot": "local-source-correction-reviewer",
  "futureIdentityProvider": "future:ops-sso + local-source-surface-release-actor-snapshot",
  "sessionStorage": "future:httpOnly-session + immutable correction approval snapshot",
  "proofRequiredBeforeWrite": true,
  "approvalWriteDisabled": true,
  "correctionWriteDisabled": true,
  "preserveAuditDigest": true,
  "preserveRollbackDigest": true,
  "noPublicSideEffect": true
}
双人确认 dry-run 可校验

Redaction 请求 / 美国数据中心 Grid Node

运营台 / 运营台人审 / 拒绝发布

Dual JSON
asset_visual_local_source_surface_release_audit_correction_approvalsinitiator=compliancereviewer=compliancesamePersonForbidden=truesecondConfirmRequired=true
approvalDigest89b4ff652edc...7fc79c
correctionDigestef66a0a689fa...aab319
rollbackDigest5ed7523763c4...e0228c
dualControlDryRun=truedualControlWriteDisabled=trueapprovalWritten=falsecorrectionEventWritten=falseauditLogMutated=falserollbackPackageMutated=falsesessionCreated=falsemcpIndexWritten=falsetradingUseDisabled=true
Role Matrixops: initiate=true / review=false / 负责发起源图消费面纠错、核对回滚包和运营变更单,但不能绕过双人确认。qa: initiate=true / review=false / 负责 digest、source markers、consumer surface 与只读展示一致性复核。editor: initiate=true / review=true / 负责官网、BBS、AI 脚注和公开文案 redaction 口径复核。compliance: initiate=true / review=true / 负责 redaction、策略阻断、非投资建议和 no-trading 红线。admin: initiate=true / review=true / 可以填任一槽位,但不能绕过同人禁止、原审计不可变、原回滚包不可变和写入禁用。
{
  "table": "asset_visual_local_source_surface_release_audit_correction_approvals",
  "schemaVersion": "2026-07-local-source-surface-release-audit-correction-dual-control-v1",
  "approvalId": "asset-visual-local-source-surface-release-audit-correction-dual-control-us-data-center-grid-node-ops-console-reject-surface-release",
  "approvalType": "local-source-surface-release-audit-correction-dual-control",
  "correctionEventId": "asset-visual-local-source-surface-release-audit-correction-us-data-center-grid-node-ops-console-reject-surface-release",
  "correctionDigest": "ef66a0a689fa7c516bbce5c72329d16606cb0daf5e1f18471b77be9065aab319",
  "targetAuditLogId": "asset-visual-local-source-surface-release-action-audit-us-data-center-grid-node-ops-console-reject-surface-release",
  "targetAuditDigest": "5f9c53e29081ed745cbe4397986ace9ad786a2ad74ce08167530b5a59e0ac275",
  "targetRollbackPackageId": "asset-visual-local-source-surface-release-rollback-us-data-center-grid-node-ops-console-reject-surface-release",
  "targetRollbackDigest": "5ed7523763c4dd803cd8f36586eda48b627b581ab28c52a72d8a822ea1e0228c",
  "actionDigest": "947f8b1fb3c9a41a81cf3c102b3bd2e3dff32d2d247d33c1c07c1b8bf509de63",
  "releaseDigest": "437dfd5c77ee4a3c36c836b903b0d9fde1fcb01decbfff261da86545cc6c291c",
  "sourceManifestDigest": "f675cc4028057b4e58e4098e2925618b67ef55e8f66c492a5cec812ef61c39ea",
  "correctionType": "redaction-request",
  "consumer": "ops-console",
  "surface": "ops-console",
  "initiatorRole": "compliance",
  "reviewerRole": "compliance",
  "secondConfirmRequired": true,
  "samePersonForbidden": true,
  "originalAuditImmutable": true,
  "originalRollbackImmutable": true,
  "createdAt": "2026-07-31T18:33:40.903Z",
  "writeMode": "dry-run-only"
}
{
  "initiatorSlot": "local-source-correction-initiator",
  "reviewerSlot": "local-source-correction-reviewer",
  "futureIdentityProvider": "future:ops-sso + local-source-surface-release-actor-snapshot",
  "sessionStorage": "future:httpOnly-session + immutable correction approval snapshot",
  "proofRequiredBeforeWrite": true,
  "approvalWriteDisabled": true,
  "correctionWriteDisabled": true,
  "preserveAuditDigest": true,
  "preserveRollbackDigest": true,
  "noPublicSideEffect": true
}