Activity on an entity flagged by screening (PEP status no, high risk).

What happened. An alert fired on entity enti_sim_lant_6uvwvng8cjh under the sanctions_or_pep detector because screening marked the entity high risk. The alert carries a skoor of 20 (band clear) and hard_signal false. The transfer associated with the alert, acht_sim_lant_5eutawmsd7n, is an ACH outgoing debit of $1,372.96 USD, settled, with no return code. What the evidence shows. The entity record shows verification VERIFIED, high_risk true, pep no, and review reasons none. Last screening date is 2026-06-26, which is within a normal screening cycle. The transfer itself shows status SETTLED with return code none, and transfer-level skoor is also 20, band clear, confidence 0.82 on n=246. Program KRIs show sanctioned_country_transfers=0 (n=111, ok) and ach_overall_return_rate=0 (n=54, ok), so nothing in the transfer or return history corroborates elevated risk. Two program KRIs are flagged watch/breach: hold_aging_hours (watch, n=1) and manual_review_aging_hours (breach, n=2), but these are program-wide aging metrics with very small sample sizes and are not tied to this entity or this transfer in the evidence provided. What was checked. Reviewed the alert's detector, score, and band; the entity's verification, PEP, and high-risk status and screening date; the transfer's status, amount, rails, and return code; the transfer-level skoor and its confidence and sample size; the program's declared volume and country scope; and the full program KRI panel for any signal of a broader pattern connecting to this entity or transfer. What is recommended. Close the alert. The entity is verified, not PEP, has no review reasons, and was screened within the last two months. The associated transfer settled cleanly with no return code and sits in a clear band at both alert and transfer level. No evidence here indicates a pattern beyond this single high-risk flag, and the transfer is already settled so no hold or release action applies.

{
  "n": 246,
  "band": "clear",
  "skoor": 20,
  "signals": [
    {
      "code": "entity.high_risk",
      "detail": "entity marked high risk by screening",
      "weight": 20
    }
  ],
  "routeReason": "detector always reviewed"
}