One-install GoCardless front door over 7 bounded domains and 9 operating workflows. The catalog admits 114 of 137 current official operations: every buildable nondeprecated bearer-token route across customers, Billing Requests and hosted authorisation, mandates, payment collection, payouts and reconciliation, outbound-payment imports, branding, notifications, and webhook delivery. It excludes eight deprecated Payer Authorisation and Redirect Flow routes, the sandbox-only simulator, and fourteen individual outbound-payment and payment-account routes whose live transport requires dynamic RFC 9421 signing. Outbound-payment imports remain included because GoCardless documents that they do not require request signing and are approved by the merchant in the dashboard. Live payment-page, whitelabel, feature, country, and scheme restrictions still apply; every mutation requires approval every run and no bundled workflow retries, cancels, refunds, or sends outbound money automatically.