1. A system to manage and secure computing devices by adjudicated resource decisions comprising: a secured policy-based control system having a processor to compute adjudicated resource decisions based on a resource identifier, at least one associated attestation record, and secure, policy-driven conditions for permitted operations on the identified resource, configured to resolve conflicts between attestation records by applying a directed acyclic graph (DAG) of attesters; an attestation non-transitory memory coupled to the policy-based control system, to store resource identifiers, associated attestation record and secure, policy-driven conditions for permitted operations on the identified resource; a first interface to receive requests for adjudicated resource decisions from computing devices and to retrieve a resource identifier, associated attestation record and secure, policy-driven conditions for permitted operations on the identified resource from the non-transitory memory that identifies a resource to be adjudicated in response to secure policy-driven conditions, and to transmit the resource identifier, associated attestation record and secure, policy-driven conditions for permitted operations on the identified resource to the policy-based control system; and a second interface, coupled to the policy-based control system to retrieve and to transmit the adjudicated resource decisions to the computing devices.