fix some obviously bugs in combination with remote

* prevent apply is forced when download is not completed or proved
* prevent download failures
* care of invalid / unset apply or release_ts values