V3 deterministic TAR archive capability pack. By-value connector composition (service_kind=cli, no separate ingredient): the local tar CLI exposes readiness, member listing, single-file TAR creation, and extraction of one requested TAR member via fixed catalog operations. Listing is read-only and works for tar plus common compressed tar archives supported by the installed tar. File-output operations materialize the source file/archive and write exactly one result file under an engine-managed output directory; these create/extract operations require GNU-compatible --transform support because the pack strips source/extracted path components with a fixed transform. Write-tier but approval=never: tar writes only to an engine-managed output dir, disables owner/permission restoration during extraction, and exposes no arbitrary flags, recursive extraction, overwrite target, file-list, remote, or compression-program surface. Requires tar on PATH with GNU-compatible transform support for file-output operations (Debian/Ubuntu: tar is commonly installed; macOS system bsdtar supports the new list operations but not the existing --transform file-output ops). Local and no-egress.