# AgentAz Specification — AI Bug-Fix & Draft-PR Agent

AgentAz is a lightweight, design-time specification vocabulary. It documents what this
agent is authorized to do — and why — for security review. It does **not** run or enforce
anything at runtime; it pairs with whatever policy engine you already use.

- **Trust Level:** A4 — Limited Autonomy
- **DNA Pattern:** Execution (Research → Plan → Execute → Verify)
- **Worst-Case Action:** Writes a fix on a sandboxed branch and opens a DRAFT pull request containing an incorrect change. The draft is never merged automatically; a human reviews and merges. Branch work is reversible and every run leaves an audit trail.
- **Authority Boundary:** Reproduces an issue, writes a candidate fix on an isolated branch, runs tests in a sandbox, and opens a draft PR for human review. It never merges to a protected branch, never force-pushes, and never deploys. A human approves and merges.
- **Verification Test:** Confirm the agent opens a DRAFT PR only and cannot merge to a protected branch (merge-to-main is absent/blocked); confirm branch changes are isolated and reversible.
- **Last Reviewed:** 2026-06-24
- **Production Readiness:** 6/6 dimensions passing. Tool isolation: writes confined to an isolated branch; merge-to-main absent. Human gates: a human reviews and merges the draft. Confidence escalation: low-confidence fixes flagged in the PR. Cost ceiling: bounded per issue. Audit trail: diff, tests, and reasoning logged. Escalation path: risky changes flagged for a maintainer.

The machine-readable contract is in `agentaz.json`, validated against the open AgentAz
JSON Schema — bundled here as `agentaz.schema.json` for offline use and published at the
permanent URL https://www.agent-kits.com/agentaz/agentaz-v1.0.schema.json (frozen v1.0).
Trust Levels are classified by
**worst-case action**, not typical behavior.

Source: https://agent-kits.com/kit/issue-to-pr-planner
