# Update Security

Draft for review by qualified legal counsel. Not final legal advice.

Update metadata must include version, minimum supported version, download URL, SHA-256 checksum, digital signature, release date, release notes, mandatory update flag, rollback version, and supported operating systems.

The app must verify HTTPS, signature, and checksum before using an update. It must reject tampered updates, preserve user data, support rollback, and never execute an unverified update file.

