# AgentAz Specification — IT Helpdesk Resolution Agent

AgentAz is a lightweight, design-time specification vocabulary. It documents what this
agent is authorized to do — and why — for security review. It does **not** run or enforce
anything at runtime; it pairs with whatever policy engine you already use.

- **Trust Level:** A2 — Recommend
- **DNA Pattern:** Escalation (Research → Evaluate → Plan → Escalate)
- **Worst-Case Action:** Suggests an incorrect resolution or misroutes a ticket, reviewed before anyone acts. It cannot change systems, reset credentials, or modify access on its own — those tools are absent from its registry.
- **Authority Boundary:** Reads a helpdesk ticket, searches the knowledge base, drafts a suggested resolution, and routes or escalates. A technician applies any change. It never resets credentials, changes configuration, or modifies access autonomously.
- **Verification Test:** Attempt to call a credential-reset, config-change, or access-modify tool → confirm it is absent from the registry.
- **Last Reviewed:** 2026-06-24
- **Production Readiness:** 6/6 dimensions passing. Tool isolation: system-change tools absent. Human gates: a technician applies changes. Confidence escalation: unresolved or risky tickets escalated. Cost ceiling: bounded per ticket. Audit trail: suggested resolution and routing logged. Escalation path: privileged or risky requests routed to IT.

The machine-readable contract is in `agentaz.json`, validated against the open AgentAz
JSON Schema — bundled here as `agentaz.schema.json` for offline use and published at the
permanent URL https://www.agent-kits.com/agentaz/agentaz-v1.0.schema.json (frozen v1.0).
Trust Levels are classified by
**worst-case action**, not typical behavior.

Source: https://agent-kits.com/kit/it-helpdesk-resolver
