A computing system comprising: a storage device configured to store a software module for execution on computing system and at least one profile for a mobile telephone network service provider; means for receiving, by a kernel executing in a trusted space of an operating system executing on a processor, a request to execute the software module to test the software module; means for communicating, by the kernel, data indicative of the software module to a policy service executing in an untrusted space of the operating system executing on the processor; means for obtaining, by the policy service, a digest generated from at least one portion of executable instructions for the software module; means for identifying, by the policy service, the at least one profile for the mobile telephone network service provider that controls access to a mobile telephone network, the at least one profile obtained from the mobile telephone network service provider and comprising an identifier for the mobile telephone network service provider, an identifier for the electronic device, and entitlement data indicative of types of operations allowed by the mobile telephone network service provider for software executing on the electronic device that accesses the mobile telephone network; means for authenticating, by the policy service, the at least one profile for the mobile telephone network service provider; means for authenticating, by the policy service, at least one entitlement associated with the software module based at least in part on the entitlement data associated with the profile of the mobile telephone network service provider and the digest; means for communicating, by the policy service, the at least one entitlement to the kernel; means for allowing, by the kernel, execution of one or more types of operations by the software module on the processor based on the at least one entitlement; and means for disallowing, by the kernel, execution of one or more types of operations by the software module on the processor based on the at least one entitlement. a storage device configured to store a software module for execution on computing system and at least one profile for a mobile telephone network service provider; means for receiving, by a kernel executing in a trusted space of an operating system executing on a processor, a request to execute the software module to test the software module; means for communicating, by the kernel, data indicative of the software module to a policy service executing in an untrusted space of the operating system executing on the processor; means for obtaining, by the policy service, a digest generated from at least one portion of executable instructions for the software module; means for identifying, by the policy service, the at least one profile for the mobile telephone network service provider that controls access to a mobile telephone network, the at least one profile obtained from the mobile telephone network service provider and comprising an identifier for the mobile telephone network service provider, an identifier for the electronic device, and entitlement data indicative of types of operations allowed by the mobile telephone network service provider for software executing on the electronic device that accesses the mobile telephone network; means for authenticating, by the policy service, the at least one profile for the mobile telephone network service provider; means for authenticating, by the policy service, at least one entitlement associated with the software module based at least in part on the entitlement data associated with the profile of the mobile telephone network service provider and the digest; means for communicating, by the policy service, the at least one entitlement to the kernel; means for allowing, by the kernel, execution of one or more types of operations by the software module on the processor based on the at least one entitlement; and means for disallowing, by the kernel, execution of one or more types of operations by the software module on the processor based on the at least one entitlement.