Release redirects can no longer downgrade from https to plain http, accepted
handoff latches and launcher health use monotonic time, an update stops when the
setting is turned off during the feed lookup, the static asset manifest is written
atomically so previous-build assets survive an interrupted write, restarts of the
same build reuse cached assets, and restart announcements expire by server time
rather than the client clock.