1. A method of policy-based runtime control of a software application, the method comprising: a hardware-based processor of a computer system receiving a request to launch a software program comprised by an enhanced application, wherein the enhanced application further comprises: security instructions that perform a security-related function associated with the software program; and an application policy descriptor, wherein the application policy descriptor identifies a global policy and a security policy, wherein the global policy identifies conditions under which the software program is capable of being launched; and wherein the security policy identifies the security instructions; the processor requesting a latest valid policy descriptor from an enterprise server, wherein the latest valid policy descriptor identifies a latest valid version of the global policy and a latest valid version of the security policy; the processor replacing, in the enhanced application, the application policy descriptor with the latest valid the policy descriptor; the processor confirming that the latest valid version of global policy permits the software program to launch; the processor launching the software program in response to the confirming; and the processor running a set of security instructions identified by the latest valid version of the security policy.