Which resource holds Kyverno's results for resources inside a single namespace?

Why this is the answer

PolicyReport is the namespaced report and lives beside the workloads it covers, so a team can read its own results with namespace-scoped access. ClusterPolicyReport covers cluster-scoped resources instead of being a filtered global report. AdmissionReport is an intermediate record rather than the report a user reads. PolicyException waives a rule and records nothing about outcomes.