Returns one finding with its DNS snapshot and evidence references. Takes the finding's value (the registrable domain) rather than a raw key, so the key format stays an internal detail. evidence carries S3 object keys, not URLs - presigning belongs behind an explicit request rather than being minted on every list call. Admin-only read; no paid entitlement required.