When performing updates, bosh does things in batches. The number of VMs in each batch is determined by the "update:" section of the deployment file.
The first batch is called the canary. It allows you to specify a small number of VMs in the first batch to change.
If the canary batch fail to upgrade then the deployment/change is halted. Your remaining VMs are unaffected; and your canary VMs are left as they are - probably broken in some way - ready for you to diagnose and fix.