Defines the scoped resources used by native services: calls, files, HTTP, processes, terminals, credentials and storage. Start with call for cancellation and resource tickets, and authorization for admission. A ticket stays with the resource until its actual cleanup completes; dropping a result observer does not release it.