Lists the lookalike domains being tracked for the tenant and where each sits in its lifecycle. This is what was FOUND; use list-brand-identifiers for the configuration it was matched against.

Ordering depends on state and the response says which you got: with a state filter results are genuinely newest-transition-first across the whole result set; without one they are ordered by identifier, not by recency.

limit is a PAGE size, not a ceiling. When more rows exist the response carries NextToken - pass it back to continue; it is absent (null) once the result set is exhausted. The token is opaque and holds a start position only.

Admin-only read; no paid entitlement required. Entitlement gates whether monitoring RUNS, not whether an existing customer can read what it already found.