1. A method, comprising: in response to an attempt to manipulate logical assets of a virtualized ecosystem, evaluating, by a computer-based control system communicatively coupled to an underlying physical, computer-based environment abstracted by the virtualized ecosystem, controls for the attempted manipulation according to a context within which the attempted manipulation is being performed and properties of the logical assets, the controls being embedded within the logical assets and including contextual, behavioral and environmental attributes of the logical assets; and enforcing the controls by permitting or denying the attempted manipulation according to an outcome of the evaluation.