Klarna Hosted Payment Page session creation, status, distribution, and disablement. This generated leaf carries 1 of the installed family’s 41 catalog operations from Klarna’s public embedded SWAGGER 2.0 document. 14 exact binary, different-audience, or PCI/key-management routes fail closed across the family. The public documentation exposes the complete schema in server-rendered page data rather than at a stable raw URL, so the manifest omits a misleading openapi_source while the audit fixture hash-locks the document. Basic authorization remains connection-owned, reads are uncached and not approval-gated, writes are grant-off and approval-always, documented idempotency keys are caller-owned, JSON inputs are bounded, and unsafe response integers stay exact. No financial or control-plane record is claimed as a task, note, or project Source.