V2 one-install Klarna front door over five bounded read feature packs and seven official embedded API documents. The visible compatibility root grows from 4 to 28 operations while preserving every established operation ID, route, argument, risk, approval, and cache contract. The audit removes one unaddressable legacy payment-session entity, corrects the order payment-method object, versions three repaired recipes at v2, and adds recursively closed requests plus lossless unsafe-integer responses. The installed family publishes 41 catalog operations covering 41 of 55 official routes; 14 binary, different-audience, multipart, or PCI/key-management routes fail closed. Root additions are action-only so the established read grant does not silently widen; 13 operations remain in version-pinned dependency packs. New money movement, loss acceptance, authorization release, and provider onboarding are destructive; every new mutation requires approval, documented Klarna-Idempotency-Key values are mandatory and caller-owned, and routes without a replay key are explicitly non-idempotent. JSON inputs are bounded, size/offset and dispute cursors walk only the same admitted route, Basic authorization stays connection-owned, and the family pins the official Europe live origin rather than exposing a caller-controlled host. The public docs expose complete schemas in server-rendered page data rather than stable raw URLs, so manifests omit misleading openapi_source fields while the generated fixture hash-locks all seven documents. No financial or control-plane object is claimed as a task, note, or project Source.