Activity on an entity flagged by screening (PEP status no, high risk).

What happened. Alert 3c8b534f-51c9-4740-ae1a-4cd2cd9eb3df fired from the sanctions_or_pep detector on entity enti_sim_nort_91eod4q93y after an outgoing ACH debit of $1,369.06 (acht_sim_nort_9n1qo3q8334) settled on 2026-09-03. The detector routes to review on every hit regardless of score, and the route reason confirms this ("detector always reviewed"). What the evidence shows. The entity is a VERIFIED business, marked high risk by screening but PEP status is no, with no review reasons listed and a screening date of 2026-08-18, about a month before the transfer. The only signal driving the score is entity.high_risk (+20), producing skoor 20 in the 'clear' band with hard_signal false. The transfer itself settled normally with no return code, and program-level KRIs show sanctioned_country_transfers at 0 (n=1048) and stale_screening_share at 0 (n=33), both ok. Counterparty country is unknown but concentration (top1=0.099) and velocity vs declared (0.333) are within normal ranges. What was checked. Reviewed the entity's verification status, PEP flag, review reasons, and screening recency. Reviewed the transfer's settlement status and return code. Reviewed the alert's score, band, and hard-signal flag. Reviewed program KRIs for related risk indicators (high_risk_entity_share=0.061, watch; pep_flagged_entities=1 of 33, watch; manual_review_aging_hours=1434.68, breach). Confirmed no prior dispositions exist for this alert or entity. What is recommended. Close the alert. The entity is verified, not a PEP, has no open review reasons, and was screened within the last month. The transfer has already settled with no return code, so there is no held transfer to release. The score band is clear and the hard signal is false; the only driver is a static high-risk flag already known to screening. Separately, the manual_review_aging_hours KRI is in breach (1434.68 hours, n=10) at the program level; this is not specific to this alert but should be flagged to the review-queue owner outside this disposition.

{
  "n": 1160,
  "band": "clear",
  "skoor": 20,
  "signals": [
    {
      "code": "entity.high_risk",
      "detail": "entity marked high risk by screening",
      "weight": 20
    }
  ],
  "routeReason": "detector always reviewed"
}