The step may perform one long provider download/test/rank and transactional generation replacement. It does not test LOCAL_REPAIR or reboot. A failed refresh intentionally remains DEGRADED_POOL and is not externally rolled back.