RADUpdate verifies signed app-bundle update manifests. A manifest declares the product, version, channel, payload file paths, payload SHA-256 digests, optional payload sizes, optional RADInstaller manifest path, and optional manifest signature path.

UpdateManager::verifyBundle() checks payload existence, size, hashes, and an RSA-SHA256 manifest signature when a public key is supplied. A/B metadata helpers track active and pending slots without performing rootfs switching directly.