Updates: user-initiated, signed packages

Launcher update check (user-initiated)

Button fetches a static manifest and compares versions; nothing else is sent

Depends on: LNCH-0001

Launcher update manifest (static signed file)

Static, signed, versioned, expiring JSON that any static host can serve; lists packages, versions, sizes, hashes

Depends on: LNCH-0001

Launcher update request disclosure screen

Shows exactly what will be requested (a plain GET of the manifest) before the first check

Depends on: LNCH-0001

Launcher manifest source setting

Configurable manifest location: Simca server, community mirror, local file or none

Depends on: LNCH-0001

Launcher community mirror list

User-added static mirrors for manifests and packages

Depends on: LNCH-0001

Launcher update package signature verification

Every package and manifest is verified against embedded public keys before use

Depends on: LNCH-0001

Launcher embedded public key set

Public keys shipped in the launcher; no key fetched at runtime

Depends on: LNCH-0001

Launcher signing key rotation

Signed key rollover so old launchers can accept new keys

Depends on: LNCH-0001

Launcher revoked key list

Revocation list delivered inside signed manifests and files

Depends on: LNCH-0001

Launcher manifest rollback and freeze protection

Reject older manifests and, when online, expired manifests; offline use cannot detect expiry, which is shown as a note

Depends on: LNCH-0001

Launcher signed update file import (.simca-update)

Import an update package from a file the user obtained by any means

Depends on: LNCH-0001

Launcher update import from USB or messenger file

Same import path for USB, SD card or a file shared in a chat app

Depends on: LNCH-0001

Launcher update import from a nearby device

Receive a signed package from another Simca device over LAN or Bluetooth

Depends on: LNCH-0001

Launcher update download with resume

Resumable download for weak connections

Depends on: LNCH-0001

Launcher chunked delta update

Chunk manifest lets the launcher download only changed chunks, like Steam depots

Depends on: LNCH-0001

Launcher full-package fallback

If a delta fails verification the launcher falls back to the full package

Depends on: LNCH-0001

Launcher update changelog before apply

Plain-language changelog shown before the user confirms

Depends on: LNCH-0001

Launcher update preflight

Check disk space, package compatibility, contract compatibility and make a fresh backup before applying

Depends on: LNCH-0001

Launcher update stage and apply

Stage files, then spawn the new generation and quit the old one; never overwrite the running image

Depends on: LNCH-0001

Launcher update postflight health check

New generation must start and pass integrity checks, otherwise automatic rollback

Depends on: LNCH-0001

Launcher manual rollback to previous version

One-step rollback to the kept generation and its data snapshot

Depends on: LNCH-0001

Launcher pin version (do not update)

Keep a version and hide update prompts for it

Depends on: LNCH-0001

Launcher update only when user launches (Steam-style setting)

Option to apply a pending update only when the user starts the package

Depends on: LNCH-0001

Launcher defer update during open shift

Block applying an update while a shift or sale is open

Depends on: LNCH-0001

Launcher update channels (stable, test)

User-selected channels; test is opt-in

Depends on: LNCH-0001

Launcher downgrade policy

Downgrades only to signed older versions and with an explicit warning

Depends on: LNCH-0001

Launcher verify installed files

User-initiated verify of installed files against the signed manifest

Depends on: LNCH-0001

Launcher repair install

Re-fetch or re-import changed or missing files

Depends on: LNCH-0001

Launcher self-update

The launcher updates itself through the same signed, user-initiated path

Depends on: LNCH-0001

Launcher update log (local)

Local log of checks, imports and applies

Depends on: LNCH-0001

Launcher update size and disk estimate

Show download size and required disk space before starting

Depends on: LNCH-0001

Launcher scheduled apply at user-chosen time

User picks a time when the update applies, never automatic

Depends on: LNCH-0001