Both links are rebuilt on the server: /v1/alerts returns neither change_event_id nor watchlist_id, though tenant.alerts stores both. The cause is matched on the entity, kind and summary the fan-out copies across; the watchlist by the oldest list covering the entity, which is the rule the fan-out itself applies.