Peripheral device with resource isolation

A host computing device for using a peripheral device package, the host computing device comprising:

• memory including:
• a plurality of compute elements for execution of a plurality of user runtime processes of the host computing device, at least one of the user runtime processes being secure and having a corresponding compute element stored in a hidden memory not mapped to virtual address space of the host computing device;
• a plurality of resources shared by the plurality of compute elements;
• and
• a command processor configured to receive commands from the user runtime processes via a driver in the host computing device, and wherein the command processor receives the commands after specification of resources in the commands made by the driver;
• wherein the command processor uses metadata from the hidden memory to enforce isolation of the resources by performing a check on the metadata to determine whether a resource allocation decision is approved, and wherein the command processor is configured to return responses to the received commands for authentication by the user runtime process.