Exchange governance v0.1.0 - Node Profile v0.2 Part II as executable UAPF

BPMN admission (AL0 -> AL2), four DMN decision tables and a CMMN case for
suspension, withdrawal and appeal.

The three rules that answer structural objections structurally:
- 17.2 circularity is a precondition, not a warning (avota-neatkariba). A
  participant cannot be the source of its own admission evidence, including
  where it commercially supplies company-register data.
- 15 adverse decisions fail closed: exhaustive grounds, 30-day notice, cure,
  5-working-day emergency review, two distinct officers, conflict-free appeal.
- 6.4 a legally significant answer is never T0.

Not an AI system (Reg. (EU) 2024/1689 Art. 3(1), Recital 12) - it does not
infer. It is the governance of one, and therefore in MIC sandbox scope.

resources/mappings.yaml traces every clause to its artefact and names the two
gaps the model cannot close alone.

fixtures/al2-standarta-uznemsana.json

@@ -0,0 +1,14 @@
+{
+  "_comment": "Standard AL2 admission. Legal facts relied upon from Uznemumu registrs; domain and key control verified by PPPA.",
+  "faktaVeids": "legal",
+  "avotsIrPieteicejs": false,
+  "avotsIrPieteicejaProdukts": false,
+  "avotsIrValstsRegistrs": true,
+  "juridiskieFaktiPielaujami": true,
+  "domenaKontroleParbaudita": true,
+  "atslegasKontroleParbaudita": true,
+  "dalibasLigumsParakstits": true,
+  "mezglaGatavibaApliecinata": true,
+  "neatkarigsNovertejums": false,
+  "_expected": { "pieradijumsPielaujams": true, "pppaRezims": "relies", "ticamibasLimenis": "AL2", "kredencialsIzsniedzams": true }
+}

fixtures/arkartas-apturesana-bez-parskatisanas.json

@@ -0,0 +1,10 @@
+{
+  "_comment": "Emergency suspension on a valid ground but with no 5-working-day review date set. 15.3 refuses it.",
+  "darbiba": "emergency_suspension",
+  "pamats": "key_compromise_not_remediated",
+  "divasAtseviskasAmatpersonas": true,
+  "bridinajumaDienas": 0,
+  "noversanasPeriodsDots": false,
+  "parskatisanasDatumsNoteikts": false,
+  "_expected": { "lemumsPielaujams": false, "_rule": "W3_arkartas_bez_parskatisanas" }
+}

fixtures/atsaukums-nederigs-pamats.json

@@ -0,0 +1,10 @@
+{
+  "_comment": "Withdrawal attempted on a ground not in the exhaustive 15.1 list. Must be refused before any credential is touched.",
+  "darbiba": "withdrawal",
+  "pamats": "we_felt_like_it",
+  "divasAtseviskasAmatpersonas": true,
+  "bridinajumaDienas": 45,
+  "noversanasPeriodsDots": true,
+  "parskatisanasDatumsNoteikts": false,
+  "_expected": { "lemumsPielaujams": false, "_rule": "W2_nezinams_pamats" }
+}

fixtures/juridiski-nozimigs-t0.json

@@ -0,0 +1,6 @@
+{
+  "_comment": "A service exposed at T0 that answers an authoritative question about representation rights. 6.4: the tier is set by the consequence of relying on the answer, not by the secrecy of the datum. Escalates to T1.",
+  "pieprasitaisLimenis": "T0",
+  "juridiskiNozimigaAtbilde": true,
+  "_expected": { "faktiskaisLimenis": "T1", "minimalaisAL": "AL1", "minimalaisMCPF": "L2", "maxStatusaKesaMin": 60, "_rule": "T0_escalated_legally_significant" }
+}

fixtures/registru-datu-sniedzejs-cirkularitate.json

@@ -0,0 +1,8 @@
+{
+  "_comment": "The applicant is itself a commercial provider of company-register data, and the UR extract was obtained from the applicant's own product. Node Profile 17.2 excludes this. The rule fires; admission stops before any challenge is run.",
+  "faktaVeids": "legal",
+  "avotsIrPieteicejs": false,
+  "avotsIrPieteicejaProdukts": true,
+  "avotsIrValstsRegistrs": false,
+  "_expected": { "pieradijumsPielaujams": false, "pppaRezims": "none", "_rule": "N2_cirkularitate_produkts" }
+}