Returns every administrative row an integration's administration wrote, across
tenants, newest first.

The query is keyed on the INTEGRATION, never on a live entity id. That is the point of the endpoint: a query keyed on an entity id can only be composed while the entity still exists, so a deletion became unreadable the moment it succeeded. Here the CREATE, the UPDATEs and the DELETE of a destination that no longer exists all come back.

The slug is matched against a closed server-side set and is never

interpolated into a query. The entity types it resolves to are the server's own,
from the one integration vocabulary; the caller cannot widen them.

Evaluation order is 401 → 403 (scope) → 403 (plane) → 404 (slug).

A caller without a platform audit scope, or without the ROOT tenant, is refused
BEFORE the slug is looked at — so an unauthorized caller cannot learn which
integrations this deployment has by comparing 404 against 403.