vanta-net — HTTP downloads over rustls: resumable, retrying, mirror-aware.
The installer fetches artifacts through a [Downloader]; bytes stream to a
<dest>.part file (resumed via HTTP range on retry) and are atomically
renamed into place on success. Verification (checksum/signature) is the
caller's responsibility (vanta-security / vanta-store); this crate only
moves bytes. Parallelism is provided by the installer running downloads on
worker threads (docs/08-installation.md). See docs/16-performance.md.