Activity on an entity flagged by screening (PEP status potential).

What happened. Alert 00be7b06-95fe-4287-8591-b268d601781d fired on entity enti_sim_nort_sr7cv2o3u under the sanctions_or_pep detector after a $1,027.78 outgoing ACH debit (acht_sim_nort_6iybrai53mo) settled on 2026-09-15. The alert was routed to review because the detector always routes to review, not because of a scoring threshold. What the evidence shows. The transfer-level skoor is 15, band clear, hard_signal false, driven solely by one signal: entity.pep_potential (+15). The entity record shows verification VERIFIED, high_risk false, pep potential noted but review reasons listed as none, and last screened 2026-09-01. The transfer itself settled with no return code, on a program (Northwind Payroll) with declared monthly volume of $2,500,000.00 and US-rail ACH activity. Counterparty country is unknown but the transfer already settled without incident. What was checked. Reviewed the alert evidence, transfer detail, entity screening record, program KRIs, and prior dispositions. No prior dispositions exist for this alert. Program KRIs are mostly ok or watch (pep_flagged_entities=1 of 33, watch; high_risk_entity_share=0.061, watch); one KRI, manual_review_aging_hours, is in breach at 1,434.7 hours on n=13, but this is a program-wide aging metric, not specific evidence tied to this entity or transfer. No sanctioned-country transfers, no unauthorized returns, and reserve_coverage_ratio is above 1.0. What is recommended. Close the alert. The score is in the clear band, hard_signal is false, the entity is verified with no open review reasons, and the underlying transfer has already settled with no return. The only elevated program-level signal (manual_review_aging_hours breach) is not specific to this entity or transfer and does not present grounds to hold or escalate this alert on its own. If the manual_review_aging_hours breach is not already being tracked separately, it should be addressed as a program-level item outside this alert.

{
  "n": 1431,
  "band": "clear",
  "skoor": 15,
  "signals": [
    {
      "code": "entity.pep_potential",
      "detail": "potential PEP match",
      "weight": 15
    }
  ],
  "routeReason": "detector always reviewed"
}