| Apps base domain | The parent zone previews are served under by default: <env>-<service>-<id>.<apps-base>. Bring your own under Custom domains. |
| Cutover | The moment a public URL starts serving the new build. |
| Dev instance | An ephemeral copy of an environment spun up from the sw dev up CLI to test a branch. Reaped when the CLI exits. |
| Primary instance | An environment’s always-on instance — no TTL, watches its tracked refs, auto-deploys on push. Stays up until torn down. |
| Preview auth | Optional gating on public URLs: shared token, upstream org/group membership (GitHub or GitLab), or a per-deployment token. |
| Probe | A startup, readiness, or liveness check in healthcheck: — one of http, tcp, exec, or grpc. |
| Resolution | Expanding every ${secret.*} and ${var.*} reference to its value at deploy time. A missing reference fails the deploy. |
| Snapshot | A point-in-time copy of a named volume. New previews seed from the latest one. |
<id> | The short, stable identifier in a preview URL. Every service in one instance shares it, and it survives redeploys. |