Personio people, employments, org units, legal entities, cost centers, workplaces, jobs, and salary bands. Generated from Personio current v2 reference inventory: every admitted method/path is checked against its own official Markdown-wrapped OpenAPI fragment, with raw page and extracted-contract hashes retained in the audit fixture. A single openapi_source is intentionally omitted because Personio publishes split per-endpoint fragments rather than one current aggregate spanning this surface. This leaf uses a manually enrolled personnel bearer produced by Personio client credentials. Personio documents a stable 24-hour token, while the Recued connection contract has no client-credentials renewal mode, so automatic renewal is not claimed. All reads are uncached; sensitive HR, compensation, document, applicant, and webhook reads are marked sensitive-read; every mutation is grant-off and approval-gated. Cursor walks replay only the cursor extracted from the documented same-origin next link. Binary document downloads are captured directly into the warehouse CAS. Beta headers are fixed where the reference requires them, request attribution uses X-Personio-App-ID: RECUED, and no operation receives an implicit default grant. A project Source is deliberately deferred because the repository Source brief requires a separate human field-path verification gate before commit.