# AgentAz Specification — Workflow Routing Agent

AgentAz is a lightweight, design-time specification vocabulary. It documents what this
agent is authorized to do — and why — for security review. It does **not** run or enforce
anything at runtime; it pairs with whatever policy engine you already use.

- **Trust Level:** A2 — Recommend
- **DNA Pattern:** Planning (Research → Plan)
- **Worst-Case Action:** Routes a request to the wrong handler, caught before anything runs. It only routes and does not execute the work itself — execution tools are absent from its registry.
- **Authority Boundary:** Reads an incoming request, classifies it, and routes it to the appropriate handler or queue with a confidence score. It never performs the downstream work and never executes actions. The receiving handler does the work.
- **Verification Test:** Confirm the agent emits a routing decision only and does not execute the routed task; confirm no execution tool exists.
- **Last Reviewed:** 2026-06-24
- **Production Readiness:** 6/6 dimensions passing. Tool isolation: execution tools absent. Human gates: handlers do the work. Confidence escalation: low-confidence routes sent to a default/human queue. Cost ceiling: bounded per request. Audit trail: routing decisions logged. Escalation path: unclassifiable requests routed to triage.

The machine-readable contract is in `agentaz.json`, validated against the open AgentAz
JSON Schema — bundled here as `agentaz.schema.json` for offline use and published at the
permanent URL https://www.agent-kits.com/agentaz/agentaz-v1.0.schema.json (frozen v1.0).
Trust Levels are classified by
**worst-case action**, not typical behavior.

Source: https://agent-kits.com/kit/workflow-router
