Diagrid brings cryptographic proof to AI agent and workflow execution

Diagrid Inc. today released Dapr 1.18, an update to the open-source runtime that lets organizations cryptographically prove how an artificial intelligence agent or workflow executed, who held custody of the work, and whether its history was altered.

The release centers on a capability the company calls verifiable execution, built from three new features. Workflow History Signing signs execution records so they become tamper-evident and independently verifiable, backed by application identities tied to the open SPIFFE standard. Workflow History Propagation lets execution lineage travel across workflow, service and application boundaries. Workflow Attestation passes verified execution context to activities and child workflows, allowing policy and compliance decisions to be made on confirmed provenance.

Together, the three are meant to give security and compliance teams a chain of custody for decisions that autonomous systems increasingly make on their own. Diagrid is the primary contributor to Dapr, the Distributed Application Runtime, a graduated project of the Cloud Native Computing Foundation and the features were designed and contributed by its engineers in collaboration with the Dapr community.

The pitch comes as enterprises move AI agents into production and face questions about accountability that resilience alone does not answer. Distributed systems have long been able to recover from failures and resume after crashes, but verifying exactly what happened during execution has been harder to do.

“The first wave of AI focused on making models intelligent. The next wave will focus on making AI systems trustworthy,” said Yaron Schneider, co-founder and chief technology officer of Diagrid and chair of the Agentic AI Foundation Workflows Working Group. “When an AI agent approves a transaction, accesses sensitive data, or triggers a business process, organizations need the ability to prove what happened in a way that’s tamper-proof.”

The update includes other changes. The Jobs API for scheduling future and recurring work graduates to stable, while hot reloading for components and configurations reaches general availability, enabling configuration updates without application restarts across six resource types.

Actor applications can now open a single bidirectional gRPC stream to the sidecar to receive callbacks without exposing an inbound server port, which the company said reduces attack surface. The runtime also gains IPv6 and dual-stack support.

The creators of Dapr founded Diagrid in 2021. The company raised $20 million in a Series A round at its 2022 launch and now sells Diagrid Catalyst, a managed platform for running long-lived agent workloads with built-in identity, access controls and governance. Its customers include companies in financial services and healthcare.

Dapr 1.18 is available now as an open-source release and on Diagrid Catalyst Cloud. Additional Catalyst support for the version is due later this month.

Image: SiliconANGLE/Ideogram