High-signal deltas grouped by integrity class — open an event to investigate.
Saved views use URL query params (severity, lifecycle, host, event) — mirror future GET /hosts/:id/drift filters.