How lists update

The short version

Nexora rebuilds its lists by script, signs them, and publishes them on this website.
The app downloads them by itself, about every 6 hours, and uses a list only if its signature checks out and it is newer than the one it has.
An add-on you installed is never replaced without a preview that you accept.
Nexora learns nothing about which add-ons you install.

A script reads public add-on registries and the addresses people sent in (Add your add-on).
For each address it loads the add-on's own live manifest and applies the checks. An add-on that does not load, is outside the list's scope or was removed after a notice is left out. Configured addresses are never fetched or written.
The list gets a list number higher than the last one, and is signed with Nexora's key, which is kept offline. This website's checks refuse a list whose signature does not check out, whose size is above what the app accepts, or that holds a stream that is not a direct https file.
The signed file is published here: catalogs/community.json (Official: catalogs/official.json; turned off: catalogs/blocklist.json).

Checks about every 6 hours while the device is online and the battery is not low, and when you open Add-ons. Refresh lists checks at once. The request carries no account, identifier or list of what you installed.
Downloads only what changed. The app asks whether each list changed since its copy; if not, nothing is downloaded.
Uses only a signed, newer list. A list whose signature does not check out, or whose number is not higher than the one the app has, is ignored. A damaged or replayed older file cannot take the place of a newer one.
Works offline. The app keeps its last working copy, and a copy shipped inside the app is the fallback. After a failed check it tries again with a delay, then waits for the next period.
Applies the turned-off list. An installed add-on that was turned off after a notice is turned off on your device and reads "Turned off by Nexora after a notice received on <date>"; it cannot be installed again.

When the list shows a newer version than the one you have, the add-on's card shows Update. Choosing it loads the add-on's own manifest and shows a preview first. Nothing installs or updates silently.
What an add-on offers (its catalogs and streams) comes from its developer's server when you browse, so it can change without an update.
Refresh in Sources & addons re-reads an installed add-on's manifest. If that fails, or the add-on now has another id, or Nexora cannot use it, the app keeps the last working copy instead of replacing it.
The app contacts an add-on's own server only when you add, refresh or use that add-on. Nexora's list downloads never contact it.