Personio recruiting applications, candidates, jobs, categories, and application stage transitions. Generated from Personio current v2 reference inventory: every admitted method/path is checked against its own official Markdown-wrapped OpenAPI fragment, with raw page and extracted-contract hashes retained in the audit fixture. A single openapi_source is intentionally omitted because Personio publishes split per-endpoint fragments rather than one current aggregate spanning this surface. This leaf is isolated to the separately enrolled Recruiting API bearer documented by Personio; it does not claim that a personnel token can authorize recruiting endpoints. All reads are uncached; sensitive HR, compensation, document, applicant, and webhook reads are marked sensitive-read; every mutation is grant-off and approval-gated. Cursor walks replay only the cursor extracted from the documented same-origin next link. Binary document downloads are captured directly into the warehouse CAS. Beta headers are fixed where the reference requires them, request attribution uses X-Personio-App-ID: RECUED, and no operation receives an implicit default grant. A project Source is deliberately deferred because the repository Source brief requires a separate human field-path verification gate before commit.