One-install OpenAI front door over five bounded feature packs and four workflows. It admits 211 of 281 current official method/path operations from the hash-pinned OpenAPI 3.1 document. The compatibility root preserves all 10 prior operation IDs, routes, and argument keys while dependencies add 201 operations. Exact fail-closed exclusions cover the soon-to-shut-down Assistants and Evals platforms, Realtime and client-secret routes, multipart-only request bodies, beta duplicate paths, unsupported POST binary or streaming responses, undocumented or ambiguous content downloads, three API-key creation responses, and one required polymorphic credential-bearing request. Standard and Admin API keys remain separate connections. JSON requests are complete body_raw documents except where closed request subsets prevent streaming, credential-bearing nested tools, or variable binary media. The two legacy compatibility input arrays remain opaque and are therefore marked sensitive-read. Reads are uncached, sensitive reads are marked sensitive-read, every mutation requires approval, and unsafe JSON integers remain exact strings.