How updates stay safe
Integrity checks, atomic installs and automatic recovery.
Integrity
- Every package has a SHA-256 checksum computed by the server at upload.
- The SDK downloads over HTTPS, verifies the checksum and rejects any mismatch before touching the running app.
- Packages are unpacked into a staging folder and moved into place only when complete; paths that try to escape are rejected.
Automatic recovery
The previous bundle is kept until the new one confirms a successful launch. A bundle that crashes before configure() twice is discarded, the previous one is restored, and an install_failed event is reported.
Limits
Note: Checksums prove a package was not corrupted or swapped after upload; they do not sign who published it. Protect your API keys and limit who can publish with team roles.