Transaction Risk Skoor 40 (review band) on a $1,223.60 ach transfer: returns.counterparty_prior_unauthorized.

What happened. A ach outgoing debit transfer of $1223.60 (acht_sim_nort_bufjvb6x2bp) on program Northwind Payroll (simulated) was flagged by detector skoor_review: Transaction Risk Skoor 40 (review band) on a $1,223.60 ach transfer: returns.counterparty_prior_unauthorized.. What the evidence shows. Transaction Risk Skoor 40 (band review). Signals: returns.counterparty_prior_unauthorized (+40). Entity Elm Partners 016: verification VERIFIED, PEP no, high risk no. What was checked. Program KRIs as of the latest snapshot: frozen_accounts ok, hold_aging_hours unmeasured, overdraft_events ok, manual_review_rate ok, card_fraud_declines unmeasured, pep_flagged_entities watch, velocity_vs_declared ok, stale_screening_share ok, high_risk_entity_share watch, reserve_coverage_ratio ok, ach_overall_return_rate ok, verification_denial_rate ok, manual_review_aging_hours breach, ach_unauthorized_return_rate ok, sanctioned_country_transfers ok, ach_administrative_return_rate ok, counterparty_concentration_top1 ok. No prior dispositions on this entity or counterparty. What is recommended. Recommended: escalate. A person decides; this draft was assembled from the evidence without a model (model output did not match the schema).

{
  "n": 859,
  "band": "review",
  "skoor": 40,
  "signals": [
    {
      "code": "returns.counterparty_prior_unauthorized",
      "detail": "1 prior unauthorized return(s)",
      "weight": 40
    }
  ],
  "confidence": 1,
  "routeReason": "detector not auto-closable"
}