Yes. I deliver such software. The downloading can be done over a network, however there should always be another mechanism in place to ensure only an authorized

Yes. I deliver such software. The downloading can be done over a network, however there should always be another mechanism in place to ensure only an authorized version runs. For example the vital computer compares a coded key compiled in the executable code with one read from a physical dongle. If it does not match, the system refuses to start. The dongle must be replaced separately by the person installing the software. It’s just an example. There are plenty of variants possible. There are usually also check lists, where the running version is displayed and verified on a safety related display to confirm the upgrade succeeded.