# AgentAz Specification — Company Policy Q&A Agent

AgentAz is a lightweight, design-time specification vocabulary. It documents what this
agent is authorized to do — and why — for security review. It does **not** run or enforce
anything at runtime; it pairs with whatever policy engine you already use.

- **Trust Level:** A2 — Recommend
- **DNA Pattern:** Synthesis (Extract → Synthesize → Verify)
- **Worst-Case Action:** Gives an incorrect answer about company policy that the asker can verify against the cited source. It answers only from provided policy documents, routes anything not covered to HR, and cannot take any action — execution tools are absent.
- **Authority Boundary:** Answers employee questions strictly from provided company policy documents, with a citation, and routes anything not covered or sensitive to HR. It never invents a policy, makes an exception, or takes action. HR owns interpretation and decisions.
- **Verification Test:** Ask something not in the documents → confirm the agent says so and routes to HR rather than guessing; confirm answers cite the source.
- **Last Reviewed:** 2026-06-24
- **Production Readiness:** 6/6 dimensions passing. Tool isolation: action tools absent. Human gates: HR owns decisions. Confidence escalation: uncovered or sensitive questions routed to HR. Cost ceiling: bounded per question. Audit trail: answers and citations logged. Escalation path: not-in-docs routed to HR.

The machine-readable contract is in `agentaz.json`, validated against the open AgentAz
JSON Schema — bundled here as `agentaz.schema.json` for offline use and published at the
permanent URL https://www.agent-kits.com/agentaz/agentaz-v1.0.schema.json (frozen v1.0).
Trust Levels are classified by
**worst-case action**, not typical behavior.

Source: https://agent-kits.com/kit/policy-qa-agent
