The native installer now throws a new error class if a staged binary's checksum no longer matches what was verified, blocking install/update instead of silently activating an unverified binary. Related logic also skips activating releases that predate release-signature enforcement, recorded as skippedUnverifiedRelease.
Telemetry event selection for the native auto-updater was refactored into a helper that returns tengu_native_auto_updater_success, a new tengu_native_auto_updater_skipped_unverified_release, or tengu_native_auto_updater_up_to_date, based on the wasUpdated/skippedUnverifiedRelease flags on the result.