v1.0.0: dev.uapf.semantic-document-analysis

UAPF v1.1 SSOT-conformant Level 4 process package — reusable semantic
document analysis, shareable across DMS / intake / mailroom systems.

Structure:
- uapf.yaml (kind: uapf.package, level 4) + manifest.json engine-compat
- bpmn/semantic-document-analysis.bpmn.xml — 3 service tasks invoking
  reserved UAPF-IP capabilities ai.redact@1, ai.extract@1, event.emit@1
- resources/mappings.yaml — task->target bindings with I/O contracts
- resources/schemas/vdvc-semantic-summary.schema.json — output contract
- resources/guardrails.yaml — GDPR + EU AI Act constraints
- metadata/ownership.yaml + metadata/lifecycle.yaml
- docs/, fixtures/, tests/eval-set.json

Validates clean against UAPFormat/UAPF-specification schemas.

docs/00-overview.md

@@ -0,0 +1,32 @@
+# dev.uapf.semantic-document-analysis — Overview
+
+**UAPF v1.1 SSOT-conformant** Level 4 process package providing
+reusable semantic document analysis.
+
+## What
+
+A 3-step BPMN process that, given free-text document content:
+
+1. Redacts PII via `ai.redact@1`
+2. Extracts VDVC v1.1 structured semantic metadata via `ai.extract@1`
+3. Emits `document.semantic-analysis.completed.v1` CloudEvent via `event.emit@1`
+
+## What's portable
+
+The package ships:
+- The BPMN flow (the algorithm shape)
+- The VDVC output JSON Schema (the output contract)
+- The resource mapping (input/output contracts, timeouts, retries)
+- The guardrails policy (GDPR + EU AI Act constraints)
+
+The host system supplies the actual AI agent that fulfils the three
+capabilities. Multiple hosts can implement the same capabilities;
+multiple packages can require the same capabilities.
+
+## How to consume
+
+Drop this `.uapf` into any UAPF-conformant runtime. The runtime
+exposes `uapf.run_process` (per UAPF-specification §6.3.1) targeting
+`Process_SemanticDocumentAnalysis`. The runtime resolves the resource
+mapping to find a target with the three required capabilities and
+invokes them in order per the BPMN flow.