# AgentAz Specification — Account Research Agent

AgentAz is a lightweight, design-time specification vocabulary. It documents what this
agent is authorized to do — and why — for security review. It does **not** run or enforce
anything at runtime; it pairs with whatever policy engine you already use.

- **Trust Level:** A1 — Research
- **DNA Pattern:** Research (Research → Verify)
- **Worst-Case Action:** Includes a wrong or stale fact in an account brief that a human reviews before acting on. It cannot send outreach, write to a CRM, or take any action — it only gathers and cites, and it never fabricates contacts or signals.
- **Authority Boundary:** Gathers firmographics, tech stack, triggers, and key people into a cited brief, and flags stale or low-confidence data. It never sends messages, writes to a CRM, or takes action. It does not invent contacts or buying signals.
- **Verification Test:** Confirm the agent cites every fact and flags unverifiable ones rather than asserting them; confirm no send or CRM-write tool exists in its registry.
- **Last Reviewed:** 2026-06-24
- **Production Readiness:** 6/6 dimensions passing. Tool isolation: send/CRM-write tools absent. Human gates: a rep reviews and acts. Confidence escalation: stale or unverifiable facts flagged. Cost ceiling: bounded per account. Audit trail: sources and citations logged. Escalation path: thin or conflicting data flagged.

The machine-readable contract is in `agentaz.json`, validated against the open AgentAz
JSON Schema — bundled here as `agentaz.schema.json` for offline use and published at the
permanent URL https://www.agent-kits.com/agentaz/agentaz-v1.0.schema.json (frozen v1.0).
Trust Levels are classified by
**worst-case action**, not typical behavior.

Source: https://agent-kits.com/kit/account-research-agent
