runs outside the application's service unit
service unit
Bootstrap
install.sh
self upgrade
Supervisor
launchRunner
Worker
K + your adapter
Controller
your program
Application
stop, start, probe
State directory
lock, journal, receipts
slots: stable, experiment
request
verify,
spawn
fence, quiesce, stop,
start, probe, resume
survives every crash