ES

Works with · DiaCroma for Agents

Keep everything you run. D4A checks what happens in between.

Your agents, your tools, your rules, your guards stay.
D4A adds the limits and the proof.

Microsoft FoundryAvailable today
AWS Bedrock AgentCoreComing next
Google Cloud · GeminiComing next
Salesforce AgentforceComing next

The governance map

Your agents, governed. Tap any piece.

D4A · the dashboard
Your company policies
Your Azure · your network
Your agents
Your tools
Your systems
Reviews the whole week · the Watch†

DiaCroma · always on, no tokens

Your Microsoft judges · asked by event, on your model

reads→weighs→signs→flags→opens a case→a person decides→signed by name
Other guards you keep
Frameworks you answer to

Tap any box. † in development; everything else is in D4A today.

Microsoft icons from the Azure architecture set. OPA and Cedar are trademarks of The Linux Foundation. DiaCroma is not affiliated with any company shown; their products are described from public documentation.

Bring your own rules

Your rules, in front of every agent. Whether its developers remembered or not.

Your agents’ instructions already hold limits. Your platform team already wrote the rules. D4A applies them before every action of every agent, without rewriting a single agent.

Microsoft Foundry Agent Service icon

Microsoft Foundry

Your agents’ instructions already hold limits. D4A reads them in Foundry and proposes each one with the sentence it came from. A person signs. In D4A today.

Open Policy Agent logo

OPA

Open Policy Agent: the open-source engine many platform teams already use to decide what is allowed. In D4A today.

Cedar logo

Cedar

An open-source language for permissions, created at AWS. Same contract in D4A, to be measured with a real Cedar engine.†

AGT

Microsoft Agent Governance Toolkit

Microsoft’s policy toolkit for agents. Joins your rules where it answers in milliseconds.†

You connect your rules once, in your own installation, never through our panel.

You choose how hard your rules stop.

The refund agent

Signed to refund up to $300. Your company rule says $150. It tries $200.

Our sample organization: a company rule stopping a refund agent in production, measured on 30 Oct 2026.

The disagreement report†

What do OPA and Cedar miss? Your own numbers answer.

On every action, D4A records what your OPA or Cedar policies decided and what the agent’s rules decided. Four boxes, from your installation, last thirty days.

Illustrative numbers, sample organization, in Enforcing.

Policies: denyPolicies: allow Agent rules: deny
41Both denied. D4A stops it and keeps the proof.
23The agent’s rules denied it. D4A stops what your policies let through.
Agent rules: allow
9The policies denied it. D4A stops it and flags the agent’s looser rules.
12,480Both allowed. Each one counts toward the totals, with proof it stayed in bounds.

Who reviews the week

Two judges look at the whole pattern. A person decides.

The Watch reviews what every agent did, not one action at a time. When something looks off, it opens a case for a person.†

DC
DiaCroma trajectory engine†Sees drift that builds up, and agents that move together.
Microsoft Task Adherence†Checks whether an agent is still on its task. Runs on your own Azure OpenAI model, so nothing leaves your cloud.

The case reaches your people in Microsoft Teams†, or by email.

The Watch never stops an action and never changes a limit. Microsoft marks Task Adherence as preview.

Get started

Keep what you run.
Add the limits this week.