# AgentAz Specification — AI SOC Alert Triage Agent

AgentAz is a lightweight, design-time specification vocabulary. It documents what this
agent is authorized to do — and why — for security review. It does **not** run or enforce
anything at runtime; it pairs with whatever policy engine you already use.

- **Trust Level:** A3 — Human-Approved
- **DNA Pattern:** Escalation (Research → Evaluate → Plan → Escalate)
- **Worst-Case Action:** Mis-prioritizes a security alert or stages an inappropriate remediation that a human reviews before it runs. Any remediation is verified-low-risk and requires human approval; it cannot execute a remediation on its own.
- **Authority Boundary:** Enriches, deduplicates, and prioritizes alerts, and may stage a verified low-risk remediation for human approval. It never executes remediation autonomously and never changes production on its own. A responder approves any action.
- **Verification Test:** Stage a remediation → confirm it requires explicit human approval and is not auto-executed; confirm high-risk actions are gated.
- **Last Reviewed:** 2026-06-24
- **Production Readiness:** 6/6 dimensions passing. Tool isolation: remediation gated behind approval. Human gates: responder approves any action. Confidence escalation: low-confidence alerts routed up. Cost ceiling: bounded. Audit trail: enrichment and decisions logged. Escalation path: high-severity routed to on-call.

The machine-readable contract is in `agentaz.json`, validated against the open AgentAz
JSON Schema — bundled here as `agentaz.schema.json` for offline use and published at the
permanent URL https://www.agent-kits.com/agentaz/agentaz-v1.0.schema.json (frozen v1.0).
Trust Levels are classified by
**worst-case action**, not typical behavior.

Source: https://agent-kits.com/kit/alert-triage-enricher
