1. A system comprising: a device comprising a plurality of domains supported by at least one platform, each domain comprising a configuration of computing resources executing on the at least one platform and each domain being configured to perform functions for an owner of the domain that may be located locally or remotely from the domain, wherein each domain may have a different owner, and wherein each owner may specify policies for operation of its domain, and the domains are isolated from each other such that their respective computing resources cannot be accessed by the other domains without authorization by the respective domain owner; and a system-wide domain manager resident on one of the domains, the system-wide domain manager configured to: enforce the policies of the domain on which it is resident, coordinate the enforcement of respective policies of the other domains in relation to the domain in which the system-wide domain manager resides, coordinate the interaction among the other domains in accordance with their respective policies and the policies of the domain in which the system-wide domain manager resides, make a request that the other domains produce a respective integrity attestation, wherein the request comprises authorization data, such that the other domains can verify, using the authorization data, that the system-wide domain manager has authority to make the request for the integrity attestation; evaluate whether the computing resources are sufficient to load a new domain that is isolated from the other domains on the device, and if the computing resources are sufficient, determine to load the new domain based on one or more policies of at least one of the domains, wherein the computing resources comprise memory and virtual machine threads.