One-install Adyen front door over nine bounded domain packs and eleven operating workflows. It admits 250 of 276 operations from the latest Checkout v72, Management v3, Balance Platform Configuration v2, Transfers v4, and Disputes v30 official specifications: all nondeprecated operations with buildable static REST transport except raw card and PIN reveal, network-token activation secrets, API-key, client-key, password, and HMAC-secret issuance, third-party stored-payment-detail forwarding, and two SCA-association mutations that require a fresh per-request SCA credential. Checkout uses the merchant-specific live hostname and documented /checkout/v72 prefix. Every mutation requires approval every run, and every secret-bearing terminal-setting or payment-method read is marked sensitive-read; every admitted POST mutation requires caller-owned idempotency; no bundled workflow captures, refunds, transfers, cashes out, accepts, or defends automatically.