Get populated group payload (policy-group-lens drill-down)
Returns policy-group metadata plus the four standard card payloads (DASH-019) in canonical order. 404 when the group does not exist on the caller’s tenant — this includes groups that exist on OTHER tenants (collapsed to 404 to avoid leaking existence). Samples match RecordedDecision shape.
Authorizations
MeshQu API key passed as a bearer token: Authorization: Bearer mqu_…. Mint one in the console (Settings → API keys).
Tenant UUID for multi-tenant isolation. Required on all authenticated routes — validated before authentication (middleware/tenant.ts), so a missing or non-UUID header returns 400 (MISSING_TENANT_ID / INVALID_TENANT_ID) before the API key is checked.
Path Parameters
Tenant policy_group_id (UUID).