1. A device comprising: one or more processors; one or more computer-readable media; a boot loader stored in the one or more computer-readable media and executable by the one or more processors to: initiate one or more hardware components of a hardware platform; and load an operating system; a trust component executable by the one or more processors to generate a device health value associated with at least one of the hardware platform or the operating system; and a status evaluator executable by the one or more processors to: determine that the device health value does not match a corresponding reference health value received from a validation entity; and based at least in part the health value not matching the corresponding reference health value, implementing a recovery environment.