Exchange governance v0.1.0 - Node Profile v0.2 Part II as executable UAPF

BPMN admission (AL0 -> AL2), four DMN decision tables and a CMMN case for
suspension, withdrawal and appeal.

The three rules that answer structural objections structurally:
- 17.2 circularity is a precondition, not a warning (avota-neatkariba). A
  participant cannot be the source of its own admission evidence, including
  where it commercially supplies company-register data.
- 15 adverse decisions fail closed: exhaustive grounds, 30-day notice, cure,
  5-working-day emergency review, two distinct officers, conflict-free appeal.
- 6.4 a legally significant answer is never T0.

Not an AI system (Reg. (EU) 2024/1689 Art. 3(1), Recital 12) - it does not
infer. It is the governance of one, and therefore in MIC sandbox scope.

resources/mappings.yaml traces every clause to its artefact and names the two
gaps the model cannot close alone.

resources/schemas/reliance-statement.schema.json

@@ -0,0 +1,49 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://pppa.lv/schemas/reliance-statement-v0.2.json",
+  "title": "Reliance statement",
+  "description": "The output of admission (Node Profile v0.2, 14.2). PPPA does not attest; it records what it relied on and what it verified.",
+  "type": "object",
+  "required": ["participantId", "assuranceLevel", "reliedUpon", "verified", "issuedAt"],
+  "properties": {
+    "participantId": { "type": "string", "description": "did:web of the participant node" },
+    "organisationName": { "type": "string" },
+    "registrationNumber": { "type": "string", "pattern": "^[0-9]{11}$" },
+    "assuranceLevel": { "enum": ["AL0", "AL1", "AL2", "AL3"] },
+    "profileVersion": { "type": "string" },
+    "mcpfLevel": { "enum": ["L1", "L2", "L3"] },
+    "reliedUpon": {
+      "type": "array",
+      "description": "Legal facts. PPPA relies; it never attests.",
+      "items": {
+        "type": "object",
+        "required": ["fact", "source", "sourceDate"],
+        "properties": {
+          "fact": { "enum": ["legalExistence", "representationRights", "signatoryIdentity"] },
+          "source": { "type": "string", "description": "e.g. Uznemumu registrs; never the applicant or its products" },
+          "sourceDate": { "type": "string", "format": "date" },
+          "sourceIsApplicant": { "const": false },
+          "sourceIsApplicantProduct": { "const": false }
+        }
+      }
+    },
+    "verified": {
+      "type": "array",
+      "description": "Technical facts. Reproducible by anyone.",
+      "items": {
+        "type": "object",
+        "required": ["fact", "method", "verifiedAt"],
+        "properties": {
+          "fact": { "enum": ["domainControl", "keyControl"] },
+          "method": { "enum": ["dns-txt-challenge", "mcpf-challenge-endpoint"] },
+          "subject": { "type": "string" },
+          "verifiedAt": { "type": "string", "format": "date-time" },
+          "evidenceRef": { "type": "string" }
+        }
+      }
+    },
+    "issuedAt": { "type": "string", "format": "date-time" },
+    "statement": { "type": "string", "description": "Human-readable form, in Latvian." }
+  },
+  "additionalProperties": false
+}