1. A method of policy-based development and runtime control of mobile applications that comprises: a processor of a computer system receiving a request to launch an enhanced application, wherein the enhanced application comprises an application policy descriptor, wherein the application policy descriptor identifies a global policy and an API policy; the processor ensuring that the application policy descriptor is current and valid; the processor extracting the global policy from the application policy descriptor; the processor concluding that the global policy permits the enhanced application to launch; the processor launching the enhanced application; the processor determining that the application implements the API policy; the processor extracting the API policy from the application policy descriptor; and the processor enforcing the API policy.