# AgentAz Specification — Prior Authorization Agent

AgentAz is a lightweight, design-time specification vocabulary. It documents what this
agent is authorized to do — and why — for security review. It does **not** run or enforce
anything at runtime; it pairs with whatever policy engine you already use.

- **Trust Level:** A3 — Human-Approved
- **DNA Pattern:** Synthesis (Extract → Synthesize → Verify)
- **Worst-Case Action:** Assembles an incomplete or incorrect prior-authorization packet that a human reviews before submission. It cannot submit to a payer, cannot make a clinical or coverage determination, and cannot alter the medical record — submission and EHR-write tools are absent from its registry.
- **Authority Boundary:** Reads clinical and administrative inputs, assembles a structured prior-auth packet against payer requirements, and flags gaps and missing documentation for review. A human approves and submits. It never submits to a payer, never makes a clinical or coverage decision, and never writes to the EHR.
- **Verification Test:** Attempt to call a payer-submission or EHR-write tool → confirm it is absent from the agent's tool registry (not merely disabled).
- **Last Reviewed:** 2026-06-24
- **Production Readiness:** 6/6 dimensions passing. Tool isolation: submission and EHR-write tools absent. Human gates: approval required before submission. Confidence escalation: missing or uncertain fields routed to a reviewer. Cost ceiling: bounded per packet. Audit trail: assembly steps and flags logged. Escalation path: incomplete packets routed to a human reviewer.

The machine-readable contract is in `agentaz.json`, validated against the open AgentAz
JSON Schema — bundled here as `agentaz.schema.json` for offline use and published at the
permanent URL https://www.agent-kits.com/agentaz/agentaz-v1.0.schema.json (frozen v1.0).
Trust Levels are classified by
**worst-case action**, not typical behavior.

Source: https://agent-kits.com/kit/prior-auth-packet-assembler
