# AgentAz Specification — Product Catalog Enrichment Agent

AgentAz is a lightweight, design-time specification vocabulary. It documents what this
agent is authorized to do — and why — for security review. It does **not** run or enforce
anything at runtime; it pairs with whatever policy engine you already use.

- **Trust Level:** A2 — Recommend
- **DNA Pattern:** Synthesis (Extract → Synthesize → Verify)
- **Worst-Case Action:** Proposes an incorrect enrichment that a human reviews before it reaches the catalog. It cannot write to the catalog and never fabricates a spec or claim — it enriches only from provided source data, flagging low-confidence fields.
- **Authority Boundary:** Enriches product records strictly from provided source data — normalizing attributes, filling gaps it can support — and flags low-confidence fields. It never fabricates specs, certifications, or marketing claims, and never writes to the catalog. A human approves before publish.
- **Verification Test:** Confirm enrichments cite source data and unsupported fields are left blank/flagged, not invented; confirm no catalog-write tool exists.
- **Last Reviewed:** 2026-06-24
- **Production Readiness:** 6/6 dimensions passing. Tool isolation: catalog-write tools absent. Human gates: a human approves before publish. Confidence escalation: low-confidence fields flagged. Cost ceiling: bounded per product. Audit trail: enrichments and sources logged. Escalation path: unsupported claims flagged.

The machine-readable contract is in `agentaz.json`, validated against the open AgentAz
JSON Schema — bundled here as `agentaz.schema.json` for offline use and published at the
permanent URL https://www.agent-kits.com/agentaz/agentaz-v1.0.schema.json (frozen v1.0).
Trust Levels are classified by
**worst-case action**, not typical behavior.

Source: https://agent-kits.com/kit/product-catalog-enricher
