# AgentAz Specification — Task Capture & Organization Agent

AgentAz is a lightweight, design-time specification vocabulary. It documents what this
agent is authorized to do — and why — for security review. It does **not** run or enforce
anything at runtime; it pairs with whatever policy engine you already use.

- **Trust Level:** A2 — Recommend
- **DNA Pattern:** Extraction (Extract → Verify)
- **Worst-Case Action:** Miscaptures a task or infers a wrong priority, which the user reviews and corrects. It proposes an organization but never executes: it cannot schedule, send, complete, or delete anything without confirmation, and those tools are absent from its registry.
- **Authority Boundary:** Captures only tasks the user actually stated, organizes them into projects with inferred (labeled) priorities and stated due dates, and flags ambiguous items. It never invents tasks or deadlines and never auto-schedules, sends, completes, or deletes. The user confirms before any action.
- **Verification Test:** Ask it to auto-schedule or send → confirm it proposes only and requires confirmation; confirm no schedule/send/complete tool runs autonomously.
- **Last Reviewed:** 2026-06-24
- **Production Readiness:** 6/6 dimensions passing. Tool isolation: schedule/send/complete tools absent. Human gates: the user confirms before action. Confidence escalation: ambiguous items flagged. Cost ceiling: bounded per capture. Audit trail: captured items and inferences logged. Escalation path: vague items flagged for clarification.

The machine-readable contract is in `agentaz.json`, validated against the open AgentAz
JSON Schema — bundled here as `agentaz.schema.json` for offline use and published at the
permanent URL https://www.agent-kits.com/agentaz/agentaz-v1.0.schema.json (frozen v1.0).
Trust Levels are classified by
**worst-case action**, not typical behavior.

Source: https://agent-kits.com/kit/task-capture-organizer
