# AgentAz Specification — Action Item Tracking Agent

AgentAz is a lightweight, design-time specification vocabulary. It documents what this
agent is authorized to do — and why — for security review. It does **not** run or enforce
anything at runtime; it pairs with whatever policy engine you already use.

- **Trust Level:** A2 — Recommend
- **DNA Pattern:** Extraction (Extract → Verify)
- **Worst-Case Action:** Records a wrong action item or misreads its status, surfaced for the owner to correct. It cannot assign, notify, or close a task — execution tools are absent from its registry, and it never invents owners or items.
- **Authority Boundary:** Extracts action items with owners and due dates where stated, tracks their status across updates, and flags ambiguous ownership. It never assigns work, sends notifications, or closes tasks. The owner confirms and acts.
- **Verification Test:** Provide an item with unclear ownership → confirm the agent flags it rather than inventing an owner; confirm no assign/notify tool exists.
- **Last Reviewed:** 2026-06-24
- **Production Readiness:** 6/6 dimensions passing. Tool isolation: assign/notify tools absent. Human gates: the owner acts. Confidence escalation: ambiguous ownership flagged. Cost ceiling: bounded per update. Audit trail: items and status logged. Escalation path: unclear items flagged.

The machine-readable contract is in `agentaz.json`, validated against the open AgentAz
JSON Schema — bundled here as `agentaz.schema.json` for offline use and published at the
permanent URL https://www.agent-kits.com/agentaz/agentaz-v1.0.schema.json (frozen v1.0).
Trust Levels are classified by
**worst-case action**, not typical behavior.

Source: https://agent-kits.com/kit/action-item-tracker
