Alert · reviewed · open
The entity's first transfer, $777.33, above the program median, came 0.0 hours after verification.
- Detector
- rapid_onboarding
- Severity
- medium
- Program
- Harbor Marketplace Payouts (simulated)
- Subject
- transfer acht_sim_harb_9xfxgwmw3yn
- Transfer
- acht_sim_harb_9xfxgwmw3yn · $777.33 · ach outgoing
- Skoor at alert
- null unscored
- Hard signal
- no
- Policy
- policy-v1
- Opened
- 2026-09-17 19:30Z
- Closed
- —
- Decision clock
- none · due — no clock
- Escalated
- —
Draft narrative
What happened. A ach outgoing credit transfer of $777.33 (acht_sim_harb_9xfxgwmw3yn) on program Harbor Marketplace Payouts (simulated) was flagged by detector rapid_onboarding: The entity's first transfer, $777.33, above the program median, came 0.0 hours after verification..
What the evidence shows. The transaction was unscored: too little history for a Skoor. Signals: counterparty.first_time (+10). Entity Juniper LLC 19: verification VERIFIED, PEP no, high risk no.
What was checked. No program KRI snapshot was available. No prior dispositions on this entity or counterparty.
What is recommended. Recommended: escalate. A person decides; this draft was assembled from the evidence without a model (model output did not match the schema).
- Recommendation
- escalate
- Confidence
- null (template, no model)
- Model
- none (template)
- Drafted
- 2026-09-17 19:30Z
- Rationale
- Template draft: recommendation follows the band and the hard-signal rule only.
Evidence
{
"n": 0,
"band": "unscored",
"skoor": null,
"typology": "rapid_onboarding",
"confidence": null,
"thresholds": {
"hours": 24
},
"medianCents": "52838",
"routeReason": "detector not auto-closable",
"hoursSinceVerification": 0
}
Skoor signals
| Signal | Weight | Hard | Detail |
|---|---|---|---|
| counterparty.first_time | +10 | first transfer with this counterparty | |
| counterparty.first_time_and_large | +15 | amount above the program p95 (75667) |
Decision
Sign in as an operator to decide. Operator sign-in →
Dispositions
No disposition yet.
Actions
Freeze, request to program, and suspend need a second, distinct approver. Clear hold, cancel, and pause execute on the requester's approval. Executed through the bank's own API with the tenant's sandbox key; a dry run when there is none.
No actions requested.