Systems and methods for managing device attestation and computing environment policy compliance

A computer-implemented method for deterministically managing execution of actions based on assessed risks associated with different computing environments and policies, the method comprising:

• identifying a request to perform an action in a particular computing environment;
• identifying a policy associated with performing the action in the computing environment;
• identifying hardware and software components of the computing environment that are associated with performing the action;
• identifying a ledger record that includes electronic records of evidence associated with levels of trust for the identified hardware and software components of the computing environment;
• verifying the electronic records of evidence have not been modified;
• identifying, based on the electronic records of evidence, a level of confidence of the electronic records of evidence for using the particular computing environment to perform the action;
• and
• deterministically performing the action or, alternatively, refraining from performing the action based on a determination of whether the identified level of confidence of the electronic records of evidence satisfies a requirement of the policy associated with performing the action in a particular context corresponding to the particular computing environment.