V3 deterministic ZIP archive capability pack. By-value connector composition (service_kind=cli, no separate ingredient): one local zip CLI ingredient exposes readiness, compressed single-file archive creation, store-only single-file archive creation, and ZIP integrity testing. Fixed-function and reproducible: the executor materializes source files and owns the throwaway output directory, while zip writes fixed archive results captured as result.file_ref. Write-tier operations write only to an engine-managed output dir, read-tier testing returns only exit status, and recipes cannot pass arbitrary flags, recurse into directories, encrypt archives, read file lists from stdin, move/delete source files, add comments, or choose output paths. Requires the zip binary on PATH (Debian/Ubuntu: apt install zip; macOS: zip is commonly installed with the system tools). Local and no-egress.