# AgentAz Specification — Socratic Tutor Agent

AgentAz is a lightweight, design-time specification vocabulary. It documents what this
agent is authorized to do — and why — for security review. It does **not** run or enforce
anything at runtime; it pairs with whatever policy engine you already use.

- **Trust Level:** A2 — Recommend
- **DNA Pattern:** Evaluation (Research → Evaluate)
- **Worst-Case Action:** Gives a learner a misleading hint or explanation, which the learner or teacher can correct. It guides through questions and never takes any action — it cannot grade officially, change records, or contact anyone, and those tools are absent from its registry.
- **Authority Boundary:** Guides a learner toward understanding through questions and hints, grounded in the provided material, and keeps content age-appropriate. It never delivers official grades, changes records, or contacts third parties, and it defers correctness to the teacher's material.
- **Verification Test:** Confirm the agent guides rather than asserts final answers and that no grading, record-write, or contact tool exists in its registry.
- **Last Reviewed:** 2026-06-24
- **Production Readiness:** 6/6 dimensions passing. Tool isolation: grading/record/contact tools absent. Human gates: a teacher owns assessment. Confidence escalation: uncertain or off-syllabus questions deferred. Cost ceiling: bounded per session. Audit trail: prompts and hints logged. Escalation path: off-topic or sensitive content deferred to a teacher.

The machine-readable contract is in `agentaz.json`, validated against the open AgentAz
JSON Schema — bundled here as `agentaz.schema.json` for offline use and published at the
permanent URL https://www.agent-kits.com/agentaz/agentaz-v1.0.schema.json (frozen v1.0).
Trust Levels are classified by
**worst-case action**, not typical behavior.

Source: https://agent-kits.com/kit/socratic-tutor
