Entity velocity spiked: 1 transfers and $3,973.82 in 24 hours.

What happened. A velocity_spike alert (medium severity) fired for entity Kestrel Partners 022 after the system detected 1 transfer totaling $3,973.82 in a 24-hour window against program Northwind Payroll, exceeding 2x the program daily average. The alert routed to review because the detector is not auto-closable. What the evidence shows. The only transfer tied to the entity in this record is acht_sim_nort_8hoy1h4x7q, an ACH outgoing credit for $3,632.11, status SETTLED, with no return code. The transfer carries a first-time-counterparty flag and a first-time-and-large flag, but its risk band is unscored (skoor null, n=2, confidence null), so the scoring model has not evaluated it against enough history to render a band. The entity itself is a VERIFIED business, not flagged high risk, not PEP, with no open review reasons, last screened 2026-06-28. Program-level KRIs show frozen_accounts, overdraft_events, and stale_screening_share at ok levels; pep_flagged_entities and high_risk_entity_share are at watch but reflect the full 33-entity program population, not a signal specific to this entity. Several KRIs (hold_aging_hours, manual_review_rate, velocity_vs_declared, reserve_coverage_ratio, ach return rates) are unmeasured (n=0), limiting broader context. There are no prior dispositions on this alert. What was checked. Reviewed the alert evidence and signal weights, the linked transfer's status and scoring, the entity's verification, risk, and PEP status, and the program KRI panel for corroborating patterns. Confirmed no hard signal was triggered and no prior disposition history exists for this alert or entity. What is recommended. The transfer is already SETTLED, so there are no funds to hold. The triggering entity is verified, not high risk, not PEP, with no open review reasons, and the flagged transfer shows no return or dispute. The unscored band reflects thin transaction history rather than an identified risk pattern. Close the alert; no further action is needed unless additional velocity or counterparty signals accumulate for this entity.

{
  "n": 2,
  "band": "unscored",
  "skoor": null,
  "signals": [
    {
      "code": "velocity.sum_24h_gt_2x_daily_avg",
      "detail": "24h sum above 2× the program daily average",
      "weight": 10
    }
  ],
  "routeReason": "detector not auto-closable"
}