Risk-change record for one address in a pool, newest first: one record per effective-level change detected by a scan (kind=SCAN, escalations and de-escalations included), per enrollment seed (kind=ENROLL), and per baseline move (kind=REBASELINE — previous/current are baselines, not effective-level observations). Designed for compliance review — "this address was risky from D1 to D30".

Records become visible a couple of minutes after they are detected (the same late-committer guard as the pool-level risk-changes feed). A freshly enrolled address may briefly return an empty page before its ENROLL seed is visible.

History of soft-deleted (removed) members is included: each page carries member_deleted so the caller knows the member's current state.

Shares the same record shape as the pool-level risk-changes feed.

Pagination: Keyset pagination in reverse detection order. Default 50 items per page, max 1000 (a page_size above the max is clamped to it; a negative page_size is rejected with 400). A page_token that does not decode to a valid cursor is rejected with 400.