V3 bounded Docker daemon diagnostics capability pack. By-value connector composition (service_kind=cli, no separate ingredient): one local docker CLI ingredient exposes fixed operations for client readiness, context inventory, daemon info, container/image/volume/network inventory, disk-usage summary, stats snapshot, and explicit container/image inspection. Docker daemon and context operations require approval because Docker socket access can reveal host paths, image names, container names, labels, environment, network endpoints, and other sensitive local runtime metadata. The pack exposes no run, exec, attach, cp, logs, build, pull, push, login, start, stop, restart, kill, rm, rmi, prune, system mutation, plugin, compose, arbitrary Docker flags, environment override, stdin, output-file write, or shell wrapper. Requires Docker CLI on PATH and a reachable Docker daemon for daemon operations.