There is a sample implementation here for an update module that checks the version and makes sure that it never goes backward.
It looks like there is no error flow when using the Download state scripts. This is consistent with your report of the deployment being still active. It may be possible to use an ArtifactIInstall_Enter state script to get the desired behavior rather than using a custom update module.
Drew