# AgentAz Specification — Transaction Reconciliation Agent

AgentAz is a lightweight, design-time specification vocabulary. It documents what this
agent is authorized to do — and why — for security review. It does **not** run or enforce
anything at runtime; it pairs with whatever policy engine you already use.

- **Trust Level:** A2 — Recommend
- **DNA Pattern:** Synthesis (Extract → Synthesize → Verify)
- **Worst-Case Action:** Surfaces an incorrect reconciliation result or a mislabeled discrepancy for a human to review. It cannot post, edit, or delete a ledger entry, and it cannot move money — execution tools are absent from its registry.
- **Authority Boundary:** Reads two sources (bank + ledger), matches transactions, and flags unmatched items, discrepancies, and duplicates for human review. It never force-matches, never inserts a balancing entry, and never writes to financial systems. All adjustments and sign-off remain with a human.
- **Verification Test:** Attempt to call a ledger-write or post-adjustment tool → confirm it is absent from the agent's tool registry (not merely disabled).
- **Last Reviewed:** 2026-06-24
- **Production Readiness:** 6/6 dimensions passing. Tool isolation: execution tools absent. Human gates: all adjustments human-owned. Confidence escalation: per-match confidence routes low-confidence pairs to review. Cost ceiling: bounded per reconciliation. Audit trail: every match and flag logged. Escalation path: discrepancies routed to an accountant.

The machine-readable contract is in `agentaz.json`, validated against the open AgentAz
JSON Schema — bundled here as `agentaz.schema.json` for offline use and published at the
permanent URL https://www.agent-kits.com/agentaz/agentaz-v1.0.schema.json (frozen v1.0).
Trust Levels are classified by
**worst-case action**, not typical behavior.

Source: https://agent-kits.com/kit/transaction-reconciler
