What is a ConstraintTemplate in Gatekeeper?

Why this is the answer

A ConstraintTemplate holds the policy's Rego and a parameter schema, and creates a new Constraint kind you can then instantiate. The configured instance is a Constraint (not the template), it is not a violations report, and it is not the webhook registration.