V3 deterministic image-OCR capability pack. By-value connector composition (service_kind=cli, no separate ingredient): one local tesseract CLI ingredient exposes bounded operations for readiness, installed language discovery, plain-text OCR, and TSV OCR with word boxes/confidence. Fixed-function and reproducible: OCR happens locally before any model sees the image, no caller-supplied Tesseract config files, no user words/patterns, no tessdata path override, no arbitrary flags, no stdin, and no shell wrapper. OCR outputs are faithful local file writes into engine-managed throwaway temp dirs, captured as result.file_ref, and consumed by downstream ai-* steps through Gateway-gated file refs. The source can be a data.file ref or a trusted local path. Requires the tesseract binary and requested language data on PATH (Debian/Ubuntu: apt install tesseract-ocr tesseract-ocr-eng; macOS: brew install tesseract). Local and no-egress, but image decoding still depends on Leptonica/Tesseract format parsers; prefer file_ref sources and keep the OCR stack patched.