How Fleet keeps Fleet-maintained apps safe and up to date Inside the Fleet-maintained apps pipeline: vendor-direct downloads, pinned hashes, validation on real hardware, human review, and automatic patching.