Architecture Cut 72 / Local Source Correction Dual Control

源图审计纠错双人确认 Dry-run

为源图发布审计 correction 事件生成双人确认 schema、角色矩阵、同人禁止和 approvalDigest。当前只读预演：approvalWritten=false，correctionEventWritten=false，auditLogMutated=false，rollbackPackageMutated=false。

Dual JSON 纠错事件纠错事务 MCP Queue MCP Document Citation Lookup 回滚包 BBS 双签范式

4双签 schema

4可校验

4同人禁止

4Approval 禁写

4approvalDigest

0实际写入

Dual Control Approval

发起人与复核人门禁

当前展示单资产/小范围双签详情。

双人确认 dry-run 可校验

元数据纠错 / 美国数据中心 Grid Node

运营台 / 运营台人审 / 批准发布 dry-run

Dual JSON

asset_visual_local_source_surface_release_audit_correction_approvalsinitiator=qareviewer=opssamePersonForbidden=truesecondConfirmRequired=true

approvalDigest0499653031eb...7d4dab

correctionDigestdc1508fd5716...fdaa57

rollbackDigest219720129183...eee8be

dualControlDryRun=truedualControlWriteDisabled=trueapprovalWritten=falsecorrectionEventWritten=falseauditLogMutated=falserollbackPackageMutated=falsesessionCreated=falsemcpIndexWritten=falsetradingUseDisabled=true

Role Matrixops: initiate=true / review=true / 负责发起源图消费面纠错、核对回滚包和运营变更单，但不能绕过双人确认。qa: initiate=true / review=true / 负责 digest、source markers、consumer surface 与只读展示一致性复核。editor: initiate=true / review=true / 负责官网、BBS、AI 脚注和公开文案 redaction 口径复核。compliance: initiate=false / review=false / 负责 redaction、策略阻断、非投资建议和 no-trading 红线。admin: initiate=true / review=true / 可以填任一槽位，但不能绕过同人禁止、原审计不可变、原回滚包不可变和写入禁用。

{
  "table": "asset_visual_local_source_surface_release_audit_correction_approvals",
  "schemaVersion": "2026-07-local-source-surface-release-audit-correction-dual-control-v1",
  "approvalId": "asset-visual-local-source-surface-release-audit-correction-dual-control-us-data-center-grid-node-ops-console-approve-surface-release-dry-run",
  "approvalType": "local-source-surface-release-audit-correction-dual-control",
  "correctionEventId": "asset-visual-local-source-surface-release-audit-correction-us-data-center-grid-node-ops-console-approve-surface-release-dry-run",
  "correctionDigest": "dc1508fd571687ca8667ef7f2f3ac7b0cac28fc55e987caf4602387119fdaa57",
  "targetAuditLogId": "asset-visual-local-source-surface-release-action-audit-us-data-center-grid-node-ops-console-approve-surface-release-dry-run",
  "targetAuditDigest": "bcae62e0fdfc6f6e2536e8ad95bec6e14febb37596c0f696519d054d2a06860a",
  "targetRollbackPackageId": "asset-visual-local-source-surface-release-rollback-us-data-center-grid-node-ops-console-approve-surface-release-dry-run",
  "targetRollbackDigest": "219720129183b9037c0302dbaa1c7ab66652ddc7e24c11e15e6d30b5faeee8be",
  "actionDigest": "0e91b9fa50354d9659a249c2e9a14af5fe34e109e6162902251de478643f45e3",
  "releaseDigest": "489c834e8bacc93e31f17664de1db5701140ea84e96d79fd231405e9b6dc6792",
  "sourceManifestDigest": "79ea8788c6fc79ea180441c5246e4201e7371f38b64af575e43dfb03d08d90f8",
  "correctionType": "metadata-correction",
  "consumer": "ops-console",
  "surface": "ops-console",
  "initiatorRole": "qa",
  "reviewerRole": "ops",
  "secondConfirmRequired": true,
  "samePersonForbidden": true,
  "originalAuditImmutable": true,
  "originalRollbackImmutable": true,
  "createdAt": "2026-07-31T18:33:40.903Z",
  "writeMode": "dry-run-only"
}

{
  "initiatorSlot": "local-source-correction-initiator",
  "reviewerSlot": "local-source-correction-reviewer",
  "futureIdentityProvider": "future:ops-sso + local-source-surface-release-actor-snapshot",
  "sessionStorage": "future:httpOnly-session + immutable correction approval snapshot",
  "proofRequiredBeforeWrite": true,
  "approvalWriteDisabled": true,
  "correctionWriteDisabled": true,
  "preserveAuditDigest": true,
  "preserveRollbackDigest": true,
  "noPublicSideEffect": true
}

双签详情 Tx Fix Fix Queue Fix Document 纠错事件回滚包资产详情

双人确认 dry-run 可校验

元数据纠错 / 美国数据中心 Grid Node

运营台 / 运营台人审 / 请求文案修复

Dual JSON

asset_visual_local_source_surface_release_audit_correction_approvalsinitiator=qareviewer=opssamePersonForbidden=truesecondConfirmRequired=true

approvalDigest96a4cc966e1e...e3d240

correctionDigest0a69ffbfcedb...4ece50

rollbackDigest23675e472f45...a26736

{
  "table": "asset_visual_local_source_surface_release_audit_correction_approvals",
  "schemaVersion": "2026-07-local-source-surface-release-audit-correction-dual-control-v1",
  "approvalId": "asset-visual-local-source-surface-release-audit-correction-dual-control-us-data-center-grid-node-ops-console-request-surface-copy-fix",
  "approvalType": "local-source-surface-release-audit-correction-dual-control",
  "correctionEventId": "asset-visual-local-source-surface-release-audit-correction-us-data-center-grid-node-ops-console-request-surface-copy-fix",
  "correctionDigest": "0a69ffbfcedb359545cc7cbc346b0028331556b59614d71b9fd94558e64ece50",
  "targetAuditLogId": "asset-visual-local-source-surface-release-action-audit-us-data-center-grid-node-ops-console-request-surface-copy-fix",
  "targetAuditDigest": "6de471aa2ff706599d2ca173ed44a5263c98e98cb4001153da1db163bf665da5",
  "targetRollbackPackageId": "asset-visual-local-source-surface-release-rollback-us-data-center-grid-node-ops-console-request-surface-copy-fix",
  "targetRollbackDigest": "23675e472f4509ee45a8b476e477d5e815a339605d103a9cb532427556a26736",
  "actionDigest": "fee1b404a2fabf04004cbc0a3c83d6af77fd07a7115b3d623854fbeab3aebf5b",
  "releaseDigest": "489c834e8bacc93e31f17664de1db5701140ea84e96d79fd231405e9b6dc6792",
  "sourceManifestDigest": "79ea8788c6fc79ea180441c5246e4201e7371f38b64af575e43dfb03d08d90f8",
  "correctionType": "metadata-correction",
  "consumer": "ops-console",
  "surface": "ops-console",
  "initiatorRole": "qa",
  "reviewerRole": "ops",
  "secondConfirmRequired": true,
  "samePersonForbidden": true,
  "originalAuditImmutable": true,
  "originalRollbackImmutable": true,
  "createdAt": "2026-07-31T18:33:40.903Z",
  "writeMode": "dry-run-only"
}

{
  "initiatorSlot": "local-source-correction-initiator",
  "reviewerSlot": "local-source-correction-reviewer",
  "futureIdentityProvider": "future:ops-sso + local-source-surface-release-actor-snapshot",
  "sessionStorage": "future:httpOnly-session + immutable correction approval snapshot",
  "proofRequiredBeforeWrite": true,
  "approvalWriteDisabled": true,
  "correctionWriteDisabled": true,
  "preserveAuditDigest": true,
  "preserveRollbackDigest": true,
  "noPublicSideEffect": true
}

双签详情 Tx Fix Fix Queue Fix Document 纠错事件回滚包资产详情

双人确认 dry-run 可校验

策略说明 / 美国数据中心 Grid Node

运营台 / 运营台人审 / 请求风控复核

Dual JSON

asset_visual_local_source_surface_release_audit_correction_approvalsinitiator=opsreviewer=compliancesamePersonForbidden=truesecondConfirmRequired=true

approvalDigest1d5642e911b4...2889ad

correctionDigest1eacf2e7afd4...248d64

rollbackDigest2c380181106b...eb60b1

Role Matrixops: initiate=true / review=true / 负责发起源图消费面纠错、核对回滚包和运营变更单，但不能绕过双人确认。qa: initiate=false / review=false / 负责 digest、source markers、consumer surface 与只读展示一致性复核。editor: initiate=false / review=false / 负责官网、BBS、AI 脚注和公开文案 redaction 口径复核。compliance: initiate=true / review=true / 负责 redaction、策略阻断、非投资建议和 no-trading 红线。admin: initiate=true / review=true / 可以填任一槽位，但不能绕过同人禁止、原审计不可变、原回滚包不可变和写入禁用。

{
  "table": "asset_visual_local_source_surface_release_audit_correction_approvals",
  "schemaVersion": "2026-07-local-source-surface-release-audit-correction-dual-control-v1",
  "approvalId": "asset-visual-local-source-surface-release-audit-correction-dual-control-us-data-center-grid-node-ops-console-request-risk-review",
  "approvalType": "local-source-surface-release-audit-correction-dual-control",
  "correctionEventId": "asset-visual-local-source-surface-release-audit-correction-us-data-center-grid-node-ops-console-request-risk-review",
  "correctionDigest": "1eacf2e7afd4d3693eb4ea0ac9e2a6bbb17dc1377f9a8675849a0045a8248d64",
  "targetAuditLogId": "asset-visual-local-source-surface-release-action-audit-us-data-center-grid-node-ops-console-request-risk-review",
  "targetAuditDigest": "b9edeeee3c9a108fecb0ac2167681278e77d9f39728edf7bc2e3e9c6921beb2d",
  "targetRollbackPackageId": "asset-visual-local-source-surface-release-rollback-us-data-center-grid-node-ops-console-request-risk-review",
  "targetRollbackDigest": "2c380181106b133f2d9b257ddf7fd006d106a45b7d72b0cb340ae28ee7eb60b1",
  "actionDigest": "12d90321004c48eae35ded1ca405cf905d2be04b66177bfdb38c36d648545e34",
  "releaseDigest": "489c834e8bacc93e31f17664de1db5701140ea84e96d79fd231405e9b6dc6792",
  "sourceManifestDigest": "79ea8788c6fc79ea180441c5246e4201e7371f38b64af575e43dfb03d08d90f8",
  "correctionType": "policy-blocker-note",
  "consumer": "ops-console",
  "surface": "ops-console",
  "initiatorRole": "ops",
  "reviewerRole": "compliance",
  "secondConfirmRequired": true,
  "samePersonForbidden": true,
  "originalAuditImmutable": true,
  "originalRollbackImmutable": true,
  "createdAt": "2026-07-31T18:33:40.903Z",
  "writeMode": "dry-run-only"
}

{
  "initiatorSlot": "local-source-correction-initiator",
  "reviewerSlot": "local-source-correction-reviewer",
  "futureIdentityProvider": "future:ops-sso + local-source-surface-release-actor-snapshot",
  "sessionStorage": "future:httpOnly-session + immutable correction approval snapshot",
  "proofRequiredBeforeWrite": true,
  "approvalWriteDisabled": true,
  "correctionWriteDisabled": true,
  "preserveAuditDigest": true,
  "preserveRollbackDigest": true,
  "noPublicSideEffect": true
}

双签详情 Tx Fix Fix Queue Fix Document 纠错事件回滚包资产详情

双人确认 dry-run 可校验

Redaction 请求 / 美国数据中心 Grid Node

运营台 / 运营台人审 / 拒绝发布

Dual JSON

asset_visual_local_source_surface_release_audit_correction_approvalsinitiator=compliancereviewer=compliancesamePersonForbidden=truesecondConfirmRequired=true

approvalDigest61cda7b826c2...ce407c

correctionDigest4cf8f8d3b9ae...359d0a

rollbackDigestcc278fdb48cc...dbdcd5

Role Matrixops: initiate=true / review=false / 负责发起源图消费面纠错、核对回滚包和运营变更单，但不能绕过双人确认。qa: initiate=true / review=false / 负责 digest、source markers、consumer surface 与只读展示一致性复核。editor: initiate=true / review=true / 负责官网、BBS、AI 脚注和公开文案 redaction 口径复核。compliance: initiate=true / review=true / 负责 redaction、策略阻断、非投资建议和 no-trading 红线。admin: initiate=true / review=true / 可以填任一槽位，但不能绕过同人禁止、原审计不可变、原回滚包不可变和写入禁用。

{
  "table": "asset_visual_local_source_surface_release_audit_correction_approvals",
  "schemaVersion": "2026-07-local-source-surface-release-audit-correction-dual-control-v1",
  "approvalId": "asset-visual-local-source-surface-release-audit-correction-dual-control-us-data-center-grid-node-ops-console-reject-surface-release",
  "approvalType": "local-source-surface-release-audit-correction-dual-control",
  "correctionEventId": "asset-visual-local-source-surface-release-audit-correction-us-data-center-grid-node-ops-console-reject-surface-release",
  "correctionDigest": "4cf8f8d3b9aeaf50358283817ed48c0b27344299bc9fa19eb3919f093c359d0a",
  "targetAuditLogId": "asset-visual-local-source-surface-release-action-audit-us-data-center-grid-node-ops-console-reject-surface-release",
  "targetAuditDigest": "05a8c07d2934be2ea763e1dd9e5e1328a8921cf1a17293d1ec51dfab0e430519",
  "targetRollbackPackageId": "asset-visual-local-source-surface-release-rollback-us-data-center-grid-node-ops-console-reject-surface-release",
  "targetRollbackDigest": "cc278fdb48cc07804299b5226d41a9749b18c6f1ad2b322f080c198a8adbdcd5",
  "actionDigest": "14e0709251cd507f07c3a4d62ebc0f1c0b54abb5d4d101a13cafc7910513641a",
  "releaseDigest": "489c834e8bacc93e31f17664de1db5701140ea84e96d79fd231405e9b6dc6792",
  "sourceManifestDigest": "79ea8788c6fc79ea180441c5246e4201e7371f38b64af575e43dfb03d08d90f8",
  "correctionType": "redaction-request",
  "consumer": "ops-console",
  "surface": "ops-console",
  "initiatorRole": "compliance",
  "reviewerRole": "compliance",
  "secondConfirmRequired": true,
  "samePersonForbidden": true,
  "originalAuditImmutable": true,
  "originalRollbackImmutable": true,
  "createdAt": "2026-07-31T18:33:40.903Z",
  "writeMode": "dry-run-only"
}

{
  "initiatorSlot": "local-source-correction-initiator",
  "reviewerSlot": "local-source-correction-reviewer",
  "futureIdentityProvider": "future:ops-sso + local-source-surface-release-actor-snapshot",
  "sessionStorage": "future:httpOnly-session + immutable correction approval snapshot",
  "proofRequiredBeforeWrite": true,
  "approvalWriteDisabled": true,
  "correctionWriteDisabled": true,
  "preserveAuditDigest": true,
  "preserveRollbackDigest": true,
  "noPublicSideEffect": true
}