Initial commit: AS4/411 directory and discovery service for Sankofa Marketplace

Co-authored-by: Cursor <cursoragent@cursor.com>

docs/examples/iso20022-as4-resolution-examples.yaml

@@ -0,0 +1,61 @@
+# as4-411 resolution examples for ISO 20022 over AS4 (FI-to-FI)
+# Profile: as4.fifi.iso20022.v1. Service: iso20022.fi. Actions: credit.transfer, fi.credit.transfer, etc.
+# BIC/LEI Tier 0/1 per security/data-classification.md.
+
+bic_example:
+  request:
+    identifiers:
+      - type: as4.partyId
+        value: BANKUS33XXX
+        scope: BIC
+    serviceContext:
+      service: iso20022.fi
+      action: credit.transfer
+  response_excerpt:
+    primary:
+      target_protocol: as4
+      target_address: https://as4.bankus.com/fi
+      transport_profile: as4.fifi.iso20022.v1
+      security:
+        signRequired: true
+        encryptRequired: true
+        keyRefs:
+          - vault://certs/bankus/iso20022
+      service_context:
+        service: iso20022.fi
+        action: credit.transfer
+      evidence:
+        source: internal directory
+        lastVerified: "2025-02-07T12:00:00Z"
+    resolution_trace:
+      - source: internal directory
+  # Output: Endpoint https://as4.bankus.com/fi, EncryptionCert vault://certs/bankus/iso20022, Profile as4.fifi.iso20022.v1, Receipts signed
+
+lei_example:
+  request:
+    identifiers:
+      - type: as4.partyId
+        value: "5493001KJTIIGC8Y1R12"
+        scope: LEI
+    serviceContext:
+      service: iso20022.fi
+      action: fi.credit.transfer
+  response_excerpt:
+    primary:
+      target_protocol: as4
+      target_address: https://as4.bankus.com/fi
+      transport_profile: as4.fifi.iso20022.v1
+      security:
+        signRequired: true
+        encryptRequired: true
+        keyRefs:
+          - vault://certs/bankus/iso20022
+      service_context:
+        service: iso20022.fi
+        action: fi.credit.transfer
+      evidence:
+        source: internal directory
+        message: "LEI to BIC mapping applied"
+    resolution_trace:
+      - source: internal directory
+  # Mapping: LEI -> BIC(s) -> AS4 Endpoint. Evidence includes LEI->BIC mapping source.