One-install PandaDoc front door over two bounded domain packs and five existing document workflows. The suite publishes 123 executable catalog operations covering 116 of 127 unique operations from PandaDoc's immutable official OpenAPI at commit 81beb8c87a80528882ff6dfa0b57fdf6b17f1c08. This 12-operation compatibility root preserves every prior operation ID, effective route, result shape, approval behavior, and single-page bound while dependencies add 111 operations. Seven deliberate aliases provide five complete collection walks plus URL and template branches for the two union-shaped create routes. Eleven fail-closed exclusions cover the OAuth credential exchange, seven multipart/query-marker upload routes, one required DELETE body, and two deprecated v1 log routes. Coverage spans documents, recipients, fields, attachments, downloads, reminders, sections, settings, templates, content, contacts, folders, members, logs, webhooks, notary, catalog, workspaces, and users. The upgrade repairs origin/path composition, documentary requiredness, stale entity claims, binary file capture, complete pagination, and exact integer parsing. OAuth bearer credentials remain connection-owned; a manually enrolled API-Key authorization connection can supply the same ingredient. Existing workflow reads and writes retain their approval behavior, while every new mutation requires approval. No Source is claimed without live field-presence proof.