Alert · reviewed · open

1 overdraft event(s) and 0 frozen account(s) on the program in the window.

Detector: overdraft_or_frozen
Severity: medium
Program: Harbor Marketplace Payouts (simulated)
Subject: account 898ba6ad-5b42-42fd-be7b-2afc9d52af5b
Transfer: —
Skoor at alert: null unscored
Hard signal: no
Policy: policy-v1
Opened: 2026-09-18 00:16Z
Closed: —
Decision clock: appeal · due 2026-09-25 00:16Z due 2026-09-25 00:16Z
Escalated: —

Draft narrative

What happened. Detector overdraft_or_frozen raised an alert on account 898ba6ad-5b42-42fd-be7b-2afc9d52af5b for program Harbor Marketplace Payouts (simulated): 1 overdraft event(s) and 0 frozen account(s) on the program in the window.. What the evidence shows. The transaction was unscored: too little history for a Skoor. What was checked. Program KRIs as of the latest snapshot: frozen_accounts ok, hold_aging_hours watch, overdraft_events watch, manual_review_rate ok, card_fraud_declines watch, pep_flagged_entities watch, velocity_vs_declared ok, stale_screening_share ok, high_risk_entity_share watch, reserve_coverage_ratio ok, ach_overall_return_rate ok, verification_denial_rate ok, manual_review_aging_hours breach, ach_unauthorized_return_rate breach, sanctioned_country_transfers ok, ach_administrative_return_rate ok, counterparty_concentration_top1 ok. No prior dispositions on this entity or counterparty. What is recommended. Recommended: escalate. A person decides; this draft was assembled from the evidence without a model (model call failed).

Recommendation

escalate

Confidence

null (template, no model)

Model

none (template)

Drafted

2026-09-18 00:17Z

Rationale

Template draft: recommendation follows the band and the hard-signal rule only.

Evidence

{
  "routeReason": "detector not auto-closable",
  "frozen_accounts": {
    "n": 3,
    "unit": "count",
    "value": 0,
    "status": "ok",
    "threshold": 0
  },
  "overdraft_events": {
    "n": 3,
    "unit": "count",
    "value": 1,
    "status": "watch",
    "threshold": 0
  }
}

Decision

Dispositions

No disposition yet.

Actions

Freeze, request to program, and suspend need a second, distinct approver. Clear hold, cancel, and pause execute on the requester's approval. Executed through the bank's own API with the tenant's sandbox key; a dry run when there is none.

No actions requested.