Software Update Security

• Official Update sources — Windows/macOS receive Updates through the Vietnam Office update mechanism or Download Center; Android receives Updates through Google Play; iOS/iPadOS receives Updates through the Apple App Store.
• Only PUBLISHED Releases are distributed — Internal builds, test builds, release candidates, or unapproved Artifacts are not used as official customer Updates.
• Release Verification — Before an Update, the system may verify Product, Version, Platform, Release status, and required metadata to ensure that the Package belongs to the correct release chain.
• Code Signing — Update Packages may use Platform-appropriate Code Signing mechanisms to support publisher authentication and detection of changes outside the release process.
• Package Integrity — An Update Package or Artifact may be checked using a Signature, Digest, Checksum, or immutable metadata to verify integrity.
• No rebuild of frozen Artifacts — An Artifact approved for a Release must retain its technical identity. A rebuilt Artifact is not automatically considered the same previously approved Artifact.
• Platform Enforcement — Updates may be installed only on the applicable Platform. A Windows Package cannot be used to update macOS, and vice versa.
• Version Entitlement Enforcement — The system may verify Version Entitlement before providing or allowing installation of a new Release. A Release belonging to another Version outside the entitlement scope is handled under the Upgrade policy.
• Secure Update Flow — Check for Update → identify Product/Platform/Version → verify Version Entitlement → identify PUBLISHED Release → verify Package/Artifact → download → install → verify Version/Release after Update.
• Security Updates — Security fixes are delivered through official Releases. Vietnam Office may publish importance and update guidance through Release Notes or Security Updates.
• Fail-safe Update behavior — If a Package cannot be verified, is for the wrong Platform, is not part of a valid Release, or is corrupted during download, the system may reject installation rather than proceed with an untrusted Artifact.
• Do not use unofficial Patches — Customers should not use Patches, Installers, or Update Packages shared through sources that cannot be verified by Vietnam Office.

Update Security principle: approved Release → PUBLISHED → immutable Artifact → Code Signing/Integrity Verification → correct Platform → correct Version Entitlement → official distribution channel → installation and post-Update verification.