Org edits drill-down (Automation page cadence/Sankey/keys click-through).

The individual audit_logs events behind an Edit-cadence chart bar, an Edit-flows Sankey ribbon, or an API-keys table row on the Automation page (DVT-1525). Admin or owner only (audit:read). The data object shape is frozen — field names are a client contract.

Always sources the single unified authoring event set (DVT-1542 retired the "Dashboard publishes" concept and the scope param that used to select between it and this one) — all resource types, action IN (create, update) — the SAME event set as GET /v1/orgs/{orgId}/analytics/automation's methodWeekly and flows rows. A single clicked chart bar/ribbon/row always totals exactly what this endpoint returns for that same filter (per-ribbon reconciliation always holds — a drill-down query is never truncated). Summed across every ribbon, this endpoint's total also reconciles against the SUM of flows[].count — but only while the org's flows query stays at or under its 40-group cap; flows groups by (channel, action, folder), and a high-cardinality org can silently truncate below 40 groups, understating that aggregate sum without either endpoint reporting an error. Rows for non-dashboard resources (element, page, ...) resolve their parent dashboard the same way the Roll-call panel's edit query does; when a parent can't be resolved (a non-content resource type or a genuine orphan), dashboardTitle is "", dashboardId falls back to the raw stored resource id, and folder is "No folder" — never fabricated.

week takes precedence over days when both are present.