kind: uapf.metadata.policies
version: "0.3.0"

package: lv.civdef.drone-threat-public-address

audit:
  decision_logging: required
  retention: P3Y
  records:
    - decision inputs, matched rule id and outputs
    - actor identity and timestamp for every manual authorisation
    - SLA timer arm / fire / clear events

data_protection:
  regime: GDPR + Latvian civil-protection law
  personal_data:
    - 112 caller data is processed by VUGD under existing emergency-service basis.
    - OSINT disinformation monitoring is restricted to public posts (guardrail GR-6).
  data_boundary: EU

access:
  package_visibility: OFFICIAL
  decision_evaluation: NBS Joint Staff and bound targets only
  amendment_authority: Ministry of Defence algorithm governance

compliance_refs:
  - Civil Protection and Disaster Management Law (Latvia)
  - Cabinet regulations on the early-warning cell-broadcast system
  - NATO Baltic Air Policing arrangements (interception execution)