Dashboard Provenance
Dashboard
Dashboard Provenance
Provenance composition drill-down, optionally restricted to one project.
project_id only ever narrows the caller’s OWN records: the helper
filters by user_id first, so passing another tenant’s project id can at
most return an empty map, never that tenant’s data.
IDOR AUDIT PASS - scoped to auth.user_id; project_id is an intra-user filter.
GET
Dashboard Provenance
