V3 deterministic filesystem capacity-inspection capability pack. By-value connector composition (service_kind=cli, no separate ingredient): one local df CLI ingredient exposes bounded read-only disk-capacity metadata for readiness, one trusted local path, one executor-supplied project directory, inode usage, and local mounted filesystems. The operations return filesystem capacity rows only; they do not return file content, list child paths, recurse directories, select remote mounts, accept filesystem type filters, expose arbitrary df flags, rely on BLOCKSIZE environment overrides, read stdin, write output files, or use a shell wrapper. Editable paths reject flag-like values, URL-like references, and scp-style remotes. Project operations run from an explicit project directory cwd supplied at execution time. Requires a POSIX-compatible df on PATH. Local and no-egress.