So its basically a reinvention of the servlet container model.
Shield equals tomcat or one of the other servlet container apps. Caplets equal war file packaged applications. Have I missed something?
And while the word "container" is used here, we mean a different kind of containers -- those that give you virtualization and app isolation at the OS level[1]. So there is no container -- like a sevlet container -- that hosts multiple applications, and no specific programming model.
[1]: https://en.wikipedia.org/wiki/Operating-system-level_virtual...