1. A method for updating and attesting code in a execution environment comprising: installing new code; measuring an identifying characteristic of the new code and making it available to an attestation system; notifying the attestation system that code has been updated to a new version whereby; and whereby when the attestation system finds that the identifying characteristic of the new code does not match a pre-stored attestation value it is aware that a legitimate mis-match could have occurred.