1
0
Files
mi-apmainas-parvaldiba/uapf.yaml
PPPA 64ecc3f48d Exchange governance v0.1.0 - Node Profile v0.2 Part II as executable UAPF
BPMN admission (AL0 -> AL2), four DMN decision tables and a CMMN case for
suspension, withdrawal and appeal.

The three rules that answer structural objections structurally:
- 17.2 circularity is a precondition, not a warning (avota-neatkariba). A
  participant cannot be the source of its own admission evidence, including
  where it commercially supplies company-register data.
- 15 adverse decisions fail closed: exhaustive grounds, 30-day notice, cure,
  5-working-day emergency review, two distinct officers, conflict-free appeal.
- 6.4 a legally significant answer is never T0.

Not an AI system (Reg. (EU) 2024/1689 Art. 3(1), Recital 12) - it does not
infer. It is the governance of one, and therefore in MIC sandbox scope.

resources/mappings.yaml traces every clause to its artefact and names the two
gaps the model cannot close alone.
2026-07-12 17:11:41 +00:00

99 lines
3.3 KiB
YAML

kind: uapf.package
id: lv.pppa.exchange-governance
name: MI apmaiņas ekosistēmas pārvaldība
description: |
Level-4 UAPF process package encoding the governance of the AI LV Exchange
(AI LV Exchange MCP Node Profile v0.2, Part II) as executable, versioned,
forkable models rather than prose.
BPMN — the admission process: application, evidence gathering, source-
independence check, domain-control and key-control challenges, assurance-level
determination, participation agreement, credential issuance, publication of
the reliance statement.
DMN — four decision tables carrying the algorithm the profile currently
states in prose:
* avota-neatkariba — §14.2 / §17.2 verified vs relied-upon facts,
and the exclusion of circularity. Legal facts
MUST come from Uzņēmumu reģistrs and MUST NOT
come from the applicant or from the applicant's
own product — which binds hardest precisely when
the applicant is a commercial provider of
company-register data.
* noteikt-ticamibas-limeni — §6.1 / §17 assurance level AL0..AL3.
* piekluves-limena-prasibas — §6.3 minimum-requirements matrix (T0..T3 to
AL, MCPF level, mandate, entitlement, audit,
status-cache), plus §6.4: a legally significant
answer is never T0 regardless of the secrecy of
the datum.
* atsaukuma-pamatojums — §15 admissibility of an adverse decision:
exhaustive grounds, 30-day notice, cure,
5-working-day emergency review, two distinct
officers. Fail-closed by default.
CMMN — the withdrawal / suspension / appeal case: discretionary and mandatory
work in an unstructured matter, with the two-officer decision and the
conflict-free appeal as first-class human tasks.
Nothing here infers. This package is the deterministic governance of an AI
system, not an AI system itself (Regulation (EU) 2024/1689, Art. 3(1) and
Recital 12). It is in scope of the sandbox because it governs admission to
the trust and identity plane of the Process-as-Code AI system.
level: 4
version: "0.1.0"
requires_capabilities:
- pppa.evidence.fetch@1+
- pppa.domain.challenge@1+
- pppa.key.challenge@1+
- pppa.credential.issue@1+
- pppa.credential.revoke@1+
- event.emit@1+
profiles_supported:
- uapf-ip-orchestrated
guardrails: resources/guardrails.yaml
includes: []
dependencies:
"AI LV Exchange MCP Node Profile": "0.2"
cornerstones:
bpmn: true
dmn: true
cmmn: true
resources: true
paths:
bpmn: bpmn
dmn: dmn
cmmn: cmmn
resources: resources
metadata: metadata
algorithms: algorithms
algorithm_cards: false
exposure:
mcp:
enabled: true
runnable: true
exposedEntrypoints:
- "Process_DalibniekaUznemsana"
- "Case_AkreditacijasAtsaukums"
exposedArtifacts:
- manifest
- bpmn
- dmn
- cmmn
- docs
owners:
- type: org
id: pppa-lv
contact: info@pppa.lv
lifecycle: draft