Remote shards survive ssh drops and are reattached on rerun. Shard
databases are named by dataset and day range, a changed layout is
refused, the local merge binary is checked before launch, Ctrl-C stops
local jobs, and local shard copies are deleted after verify unless
--keep-shards.