V3 deterministic PDF-transform capability pack. By-value connector composition (service_kind=cli, no separate ingredient): one local qpdf CLI ingredient exposes readiness, trusted-path structure checks, trusted-path page counts, structural PDF rebuild, and web-linearization. Fixed-function and reproducible: transformations happen locally before any model sees the PDF. File-output operations write only to an engine-managed throwaway output dir and capture result.file_ref; downstream steps consume transformed PDFs through a Gateway-gated file ref. The source can be a data.file ref or a trusted local path for file-output operations; stdout inspection operations are path-based on purpose because current CLI isolation forbids combining file_ref materialization with stdout value capture. Requires the qpdf binary on PATH (Debian/Ubuntu: apt install qpdf; macOS: brew install qpdf). Local and no-egress; qpdf parses PDF structure but does not fetch remote URLs. The rebuild operation is a good follow-up after metadata-nullification tools because qpdf rewrites the PDF structure and removes orphaned objects, but it does not render, OCR, extract text, or semantically validate page contents.