Bounded work containers — each a sealed, signed arc of sessions. The git/docker analog of releases. Mirrors /dashboard/cycles.