L3dgr: Operator's Guide

Operational guidance for the L3dgr Docker Desktop Extension. Matches L3dgr 0.82.x Settings labels. This page is not a contract, not legal advice, and not a compliance certification. Legal PDFs remain on L3dgr legal and compliance. Print from the browser if you need paper.

Install

Docker Marketplace is not listed. Pin this Hub tag. Lobby scan, verify, and file processing do not require sign-in. Dashboard Seal and live ingest require a licensed session. After checkout, sign in or set up your account portal before the first extension sign-in, then sign in to the extension with the same Google or Microsoft account. If entitlement does not load, use Refresh Keys under Settings, Entitlement, or contact L3dgr support.

docker extension install fors33/l3dgr:0.82.3-rc.1

If already installed:

docker extension update -f fors33/l3dgr:0.82.3-rc.1

Uninstall:

docker extension uninstall fors33/l3dgr

Licensed CI

Licensed CI seal is a paid CLI. It is not docker run fors33/l3dgr. That image is the Desktop extension, not a server. Independent scan and verify stay Fors33 Verifier and Fors33 Scanner. L3dgr remains the Docker Desktop extension.

What L3dgr does

Local integrity work: hash selected paths, store seals, rerun Verify when you need drift proof against the manifest. Seal is a licensed Dashboard action. Unsigned operators and signed-in operators without a license email use the Lobby Scan and Verify path.

Pick one or more folders (same control as the main screen).
Run Scan until the Evidence tree settles.
Run Verify later against those roots for a fresh comparison to sealed digests.

Mismatch glance

First Scan or Verify of a folder freezes a baseline. Later runs compare against that freeze, not the previous run. Freeze remains when Mismatch glance is Off.

m

The fraction of those baseline paths that changed or went missing.

Δm

How m moved since the previous comparable run. It needs two runs.

a

Whether that movement is speeding up. It stays n/a until three comparable runs exist.

Dashboard scoreboard footer page 4 shows m, Δm, and a when Glance is on. Off hides that page and omits those scalars from Readout complete lines. Freeze still runs; turning Glance back on does not require a new freeze walk. Lobby does not show the scoreboard glance rail.

Settings → Local → Mismatch glance: Off hides the glance. Glance shows math without toast. Notify When Accelerating and Custom toast when a exceeds the threshold. This does not block Scan, Verify, or Seal. Seals, manifests, and receipts do not include a.

Off

Hides footer page 4 and omits m, Δm, and a from Readout. Freeze still runs.

Glance

Shows m, Δm, and a without a toast.

Notify When Accelerating

Toast when defined a is positive.

Custom

Toast when a exceeds a finite number you set. Empty saves as Off.

Not a seal

Seals, manifests, and receipts do not include a. Mismatch glance is a watch beside Scan and Verify, not a cryptographic verdict.

Settings → Local

Hash algorithm and Audit Behavior stay on Local. Open Settings in the extension for those controls. This page does not replace the Local tab.

Getting help

Note the job ref from Readout or Jobs when reporting a defect.
Download Support Bundle under Settings → Help & Support (includes Readout export and preflight).
Open System Information for extension and daemon version parity.
Visit L3dgr Support or email support@fors33.com with your bundle attached.

Use of L3dgr does not establish, guarantee, or certify compliance with SEC Rule 17a-4(f), FDA 21 CFR Part 11, or any other regulatory framework.