An apparatus, comprising: a device including at least one memory adapted to store run-time data for the device, and at least one processor that is adapted to execute processor-executable code that, in response to execution, enables the device to perform actions, including: an integrated circuit, including: a set of independent execution environments configured to have a defense-in-depth hierarchy, wherein the set of independent execution environments includes a first independent execution environment and a second independent execution environment, and wherein the first independent execution environment is a most trusted execution environment on the integrated circuit; a first watchdog timer, associated with the first independent execution environment and which is configured to cause the first watchdog timer to reset on a periodic basis, and wherein the first watchdog timer is configured to cause at least part of the integrated circuit to reset in response to the first watchdog timer timing out; a second watchdog timer, wherein the second independent execution environment is configured to cause the second watchdog timer to reset on a periodic basis, and wherein the second watchdog timer is configured to send an interrupt to the first independent execution environment in response to the second watchdog timer timing out wherein the second watchdog timer is further configured to reset the second independent execution environment in response to the second watchdog timer timing out; and wherein the set of independent execution environments further includes a third independent execution environment that is less trusted than the second execution environment, the integrated circuit further includes a third watchdog timer, the third independent execution environment is configured to cause the third watchdog timer to reset on a periodic basis, and wherein the third watchdog timer is configured to send an interrupt to at least one of the first independent execution environment or the second independent execution environment in response to the third watchdog timer timing out. a device including at least one memory adapted to store run-time data for the device, and at least one processor that is adapted to execute processor-executable code that, in response to execution, enables the device to perform actions, including: an integrated circuit, including: a set of independent execution environments configured to have a defense-in-depth hierarchy, wherein the set of independent execution environments includes a first independent execution environment and a second independent execution environment, and wherein the first independent execution environment is a most trusted execution environment on the integrated circuit; a first watchdog timer, associated with the first independent execution environment and which is configured to cause the first watchdog timer to reset on a periodic basis, and wherein the first watchdog timer is configured to cause at least part of the integrated circuit to reset in response to the first watchdog timer timing out; a second watchdog timer, wherein the second independent execution environment is configured to cause the second watchdog timer to reset on a periodic basis, and wherein the second watchdog timer is configured to send an interrupt to the first independent execution environment in response to the second watchdog timer timing out a set of independent execution environments configured to have a defense-in-depth hierarchy, wherein the set of independent execution environments includes a first independent execution environment and a second independent execution environment, and wherein the first independent execution environment is a most trusted execution environment on the integrated circuit; a first watchdog timer, associated with the first independent execution environment and which is configured to cause the first watchdog timer to reset on a periodic basis, and wherein the first watchdog timer is configured to cause at least part of the integrated circuit to reset in response to the first watchdog timer timing out; a second watchdog timer, wherein the second independent execution environment is configured to cause the second watchdog timer to reset on a periodic basis, and wherein the second watchdog timer is configured to send an interrupt to the first independent execution environment in response to the second watchdog timer timing out wherein the second watchdog timer is further configured to reset the second independent execution environment in response to the second watchdog timer timing out; and wherein the set of independent execution environments further includes a third independent execution environment that is less trusted than the second execution environment, the integrated circuit further includes a third watchdog timer, the third independent execution environment is configured to cause the third watchdog timer to reset on a periodic basis, and wherein the third watchdog timer is configured to send an interrupt to at least one of the first independent execution environment or the second independent execution environment in response to the third watchdog timer timing out.