Mechanisms allow for execution of unsigned managed code graphic resource call in a closed system when such unsigned content is executing on the system. For example, a managed code graphic resource device is used between an application running unsigned content and a supervisor mode graphic resource device. A managed mode graphics device validates graphic resource calls made by the application. A managed mode graphics device manages resource calls by differentiating between calls that may be made directly to the supervisor mode graphics device, calls that may be pipelined for later action, and calls that may be made to an intermediate device.