One-install Xero organisation front door over eight bounded official-contract packs and eighteen non-chat read workflows. It covers tenant discovery plus the complete representable Accounting, Fixed Assets, Files, Projects, and Finance surfaces. Regional Payroll, Bank Feeds, and App Store billing stay separately installed so ordinary bookkeeping never asks for irrelevant workforce, partner, or non-tenanted billing authority. Every tenant-scoped call requires an explicit Xero tenant ID; reads are uncached, mutations are grant-off and always approved, binary downloads are isolated file_ref values, and unsafe JSON integers remain exact strings. The suite admits 453 outbound operations from immutable hash-pinned Xero contracts and records 24 transport exclusions rather than emitting invalid multipart or binary upload bodies.