v0.2

metadata/policies.yaml

@@ -1,22 +1,29 @@
-kind: uapf.policies
-classification:
-  level: restricted
-  dataCategories:
-    - civil-defence
-    - national-security
-    - public-warning
-execution:
-  requiresApproval: true
-  approvalRoles:
-    - aizsardzibas-ministrija
-    - krizes-vadibas-centrs
-  auditRequired: true
-  maxConcurrentExecutions: 1
-  allowedEnvironments:
-    - development
-    - staging
-requiredClaims:
-  - type: civil-defence-operator
-delegation:
-  allowAgentDelegation: false
-  maxDelegationDepth: 0
+kind: uapf.metadata.policies
+version: "0.3.0"
+
+package: lv.civdef.drone-threat-public-address
+
+audit:
+  decision_logging: required
+  retention: P3Y
+  records:
+    - decision inputs, matched rule id and outputs
+    - actor identity and timestamp for every manual authorisation
+    - SLA timer arm / fire / clear events
+
+data_protection:
+  regime: GDPR + Latvian civil-protection law
+  personal_data:
+    - 112 caller data is processed by VUGD under existing emergency-service basis.
+    - OSINT disinformation monitoring is restricted to public posts (guardrail GR-6).
+  data_boundary: EU
+
+access:
+  package_visibility: OFFICIAL
+  decision_evaluation: NBS Joint Staff and bound targets only
+  amendment_authority: Ministry of Defence algorithm governance
+
+compliance_refs:
+  - Civil Protection and Disaster Management Law (Latvia)
+  - Cabinet regulations on the early-warning cell-broadcast system
+  - NATO Baltic Air Policing arrangements (interception execution)