For the technically curious
The app downloads the manifest, compares its revision with the one it has, and fetches only the files whose SHA-256 checksum has changed. A set is installed only if every file matches its checksum and every rule pack loads. If anything fails, the app keeps the rules it has.