The service should work under a dedicated system user and have a high level of security in its systemd config. (see yunohost systemd config for an example - https://github.com/YunoHost/example_ynh/blob/master/conf/systemd.service)

The exec systemcall should be blocked for this systemd unit.

If the playbook is interrupted, the service should be in a correct state. New versions of assetproxy should be installed alongisde an already running version before restarting the service and swapping the version.