Deployment artefacts for managed endpoints. Each artefact is pinned by SHA-256 by whatever fetches it, so a modified file fails rather than installs.