Exchange governance v0.1.0 - Node Profile v0.2 Part II as executable UAPF

BPMN admission (AL0 -> AL2), four DMN decision tables and a CMMN case for
suspension, withdrawal and appeal.

The three rules that answer structural objections structurally:
- 17.2 circularity is a precondition, not a warning (avota-neatkariba). A
  participant cannot be the source of its own admission evidence, including
  where it commercially supplies company-register data.
- 15 adverse decisions fail closed: exhaustive grounds, 30-day notice, cure,
  5-working-day emergency review, two distinct officers, conflict-free appeal.
- 6.4 a legally significant answer is never T0.

Not an AI system (Reg. (EU) 2024/1689 Art. 3(1), Recital 12) - it does not
infer. It is the governance of one, and therefore in MIC sandbox scope.

resources/mappings.yaml traces every clause to its artefact and names the two
gaps the model cannot close alone.

manifest.json

@@ -0,0 +1,64 @@
+{
+  "kind": "uapf.package",
+  "id": "lv.pppa.exchange-governance",
+  "name": "MI apmaiņas ekosistēmas pārvaldība",
+  "description": "Level-4 UAPF process package encoding the governance of the AI LV Exchange\n(AI LV Exchange MCP Node Profile v0.2, Part II) as executable, versioned,\nforkable models rather than prose.\n\nBPMN — the admission process: application, evidence gathering, source-\nindependence check, domain-control and key-control challenges, assurance-level\ndetermination, participation agreement, credential issuance, publication of\nthe reliance statement.\n\nDMN — four decision tables carrying the algorithm the profile currently\nstates in prose:\n  * avota-neatkariba          — §14.2 / §17.2 verified vs relied-upon facts,\n                                and the exclusion of circularity. Legal facts\n                                MUST come from Uzņēmumu reģistrs and MUST NOT\n                                come from the applicant or from the applicant's\n                                own product — which binds hardest precisely when\n                                the applicant is a commercial provider of\n                                company-register data.\n  * noteikt-ticamibas-limeni  — §6.1 / §17 assurance level AL0..AL3.\n  * piekluves-limena-prasibas — §6.3 minimum-requirements matrix (T0..T3 to\n                                AL, MCPF level, mandate, entitlement, audit,\n                                status-cache), plus §6.4: a legally significant\n                                answer is never T0 regardless of the secrecy of\n                                the datum.\n  * atsaukuma-pamatojums      — §15 admissibility of an adverse decision:\n                                exhaustive grounds, 30-day notice, cure,\n                                5-working-day emergency review, two distinct\n                                officers. Fail-closed by default.\n\nCMMN — the withdrawal / suspension / appeal case: discretionary and mandatory\nwork in an unstructured matter, with the two-officer decision and the\nconflict-free appeal as first-class human tasks.\n\nNothing here infers. This package is the deterministic governance of an AI\nsystem, not an AI system itself (Regulation (EU) 2024/1689, Art. 3(1) and\nRecital 12). It is in scope of the sandbox because it governs admission to\nthe trust and identity plane of the Process-as-Code AI system.\n",
+  "level": 4,
+  "version": "0.1.0",
+  "requires_capabilities": [
+    "pppa.evidence.fetch@1+",
+    "pppa.domain.challenge@1+",
+    "pppa.key.challenge@1+",
+    "pppa.credential.issue@1+",
+    "pppa.credential.revoke@1+",
+    "event.emit@1+"
+  ],
+  "profiles_supported": [
+    "uapf-ip-orchestrated"
+  ],
+  "guardrails": "resources/guardrails.yaml",
+  "includes": [],
+  "dependencies": {
+    "AI LV Exchange MCP Node Profile": "0.2"
+  },
+  "cornerstones": {
+    "bpmn": true,
+    "dmn": true,
+    "cmmn": true,
+    "resources": true
+  },
+  "paths": {
+    "bpmn": "bpmn",
+    "dmn": "dmn",
+    "cmmn": "cmmn",
+    "resources": "resources",
+    "metadata": "metadata",
+    "algorithms": "algorithms"
+  },
+  "algorithm_cards": false,
+  "exposure": {
+    "mcp": {
+      "enabled": true,
+      "runnable": true,
+      "exposedEntrypoints": [
+        "Process_DalibniekaUznemsana",
+        "Case_AkreditacijasAtsaukums"
+      ],
+      "exposedArtifacts": [
+        "manifest",
+        "bpmn",
+        "dmn",
+        "cmmn",
+        "docs"
+      ]
+    }
+  },
+  "owners": [
+    {
+      "type": "org",
+      "id": "pppa-lv",
+      "contact": "info@pppa.lv"
+    }
+  ],
+  "lifecycle": "draft"
+}