# AgentAz Specification — Expense Audit & Compliance Agent

AgentAz is a lightweight, design-time specification vocabulary. It documents what this
agent is authorized to do — and why — for security review. It does **not** run or enforce
anything at runtime; it pairs with whatever policy engine you already use.

- **Trust Level:** A2 — Recommend
- **DNA Pattern:** Evaluation (Research → Evaluate)
- **Worst-Case Action:** Flags a compliant expense or misses a non-compliant one, surfaced for human review. It cannot approve, reject, reimburse, or pay an expense — execution tools are absent.
- **Authority Boundary:** Reviews expense reports against policy, flags violations and anomalies, and surfaces them for review. It never approves, rejects, or reimburses. A human in finance decides.
- **Verification Test:** Attempt to call an approve, reject, or payment tool → confirm it is absent from the agent's registry.
- **Last Reviewed:** 2026-06-24
- **Production Readiness:** 6/6 dimensions passing. Tool isolation: approval/payment tools absent. Human gates: finance decides. Confidence escalation: ambiguous items flagged. Cost ceiling: bounded. Audit trail: flags and policy refs logged. Escalation path: violations routed to finance.

The machine-readable contract is in `agentaz.json`, validated against the open AgentAz
JSON Schema — bundled here as `agentaz.schema.json` for offline use and published at the
permanent URL https://www.agent-kits.com/agentaz/agentaz-v1.0.schema.json (frozen v1.0).
Trust Levels are classified by
**worst-case action**, not typical behavior.

Source: https://agent-kits.com/kit/expense-report-auditor
