V2 one-install Mollie front door over six bounded feature packs and seven official OpenAPI 3.1 documents. The visible compatibility root grows from 19 to 58 operations while preserving every established operation ID, route, argument, entity, risk, approval, result-path, cache, and recipe reference contract; compatibility calls gain lossless response parsing and only type-faithful closed request schemas. The installed family publishes 124 catalog operations covering 124 of 143 unique official routes; 19 deprecated, different-auth, or unbuildable signed routes fail closed. Root additions are action-only so the established read surface does not silently widen default grants; remaining reads and one reserved action per domain stay in the dependency leaves. Every new mutation requires approval, reads are uncached, money movement and irreversible lifecycle actions are destructive, and every new POST requires a caller-owned Mollie Idempotency-Key. Bearer authorization remains connection-owned, JSON inputs are bounded, opaque HAL pagination remains explicit and manual, and unsafe response integers stay exact strings. The official ReadMe host exposes each complete schema in public server-rendered page data rather than at a stable raw OpenAPI URL, so the root and leaves omit misleading openapi_source fields while the generated fixture hash-locks every extracted document. No financial or control-plane object is claimed as a task, note, or project Source.