Ah hah! After searching the forum for quite a while I managed to find this post:
I knew I read about the update mechanism somewhere. So basically, the network recieves an update (supposedly through a public share) that is cryptographically signed by the dev team, but before it actually applies the update, it will create a test vault to see if the update is good. The update must be at least as efficient as the code before the update.