A system comprising: memory comprising one or more memory units; a processing apparatus comprising one or more processing units configured to run: service logic in a guest operating system of a virtual machine; and a hosting service, wherein the hosting service is configured to perform: providing, to a trusted entity on a central processing unit of the one or more processing units, a command for a launch of the virtual machine; assigning, to the virtual machine, at least a portion of the memory for the guest operating system; submitting, to the trusted entity, a request to measure an address space of the virtual machine to provide a measurement digest of the address space of the guest operating system; including, in a configuration object, a policy provided by the user for the service logic, wherein the policy for the service logic defines one or more rules for the service logic, wherein the one or more rules include at least one rule for which containers may run in the guest operating system; hashing the policy for the service logic to provide a hash digest of the policy; submitting, to the trusted entity, the hash digest of the policy for the service logic; and completing the launch of the virtual machine, wherein the hash digest of the policy for the service logic and the measurement digest of the address space of the guest operating system are used by the system as immutable fields in any attestation reports for the virtual machine. memory comprising one or more memory units; a processing apparatus comprising one or more processing units configured to run: service logic in a guest operating system of a virtual machine; and a hosting service, wherein the hosting service is configured to perform: providing, to a trusted entity on a central processing unit of the one or more processing units, a command for a launch of the virtual machine; assigning, to the virtual machine, at least a portion of the memory for the guest operating system; submitting, to the trusted entity, a request to measure an address space of the virtual machine to provide a measurement digest of the address space of the guest operating system; including, in a configuration object, a policy provided by the user for the service logic, wherein the policy for the service logic defines one or more rules for the service logic, wherein the one or more rules include at least one rule for which containers may run in the guest operating system; hashing the policy for the service logic to provide a hash digest of the policy; submitting, to the trusted entity, the hash digest of the policy for the service logic; and completing the launch of the virtual machine, wherein the hash digest of the policy for the service logic and the measurement digest of the address space of the guest operating system are used by the system as immutable fields in any attestation reports for the virtual machine. providing, to a trusted entity on a central processing unit of the one or more processing units, a command for a launch of the virtual machine; assigning, to the virtual machine, at least a portion of the memory for the guest operating system; submitting, to the trusted entity, a request to measure an address space of the virtual machine to provide a measurement digest of the address space of the guest operating system; including, in a configuration object, a policy provided by the user for the service logic, wherein the policy for the service logic defines one or more rules for the service logic, wherein the one or more rules include at least one rule for which containers may run in the guest operating system; hashing the policy for the service logic to provide a hash digest of the policy; submitting, to the trusted entity, the hash digest of the policy for the service logic; and completing the launch of the virtual machine, wherein the hash digest of the policy for the service logic and the measurement digest of the address space of the guest operating system are used by the system as immutable fields in any attestation reports for the virtual machine.