Activity on an entity flagged by screening (PEP status potential).

What happened. Alert 58934707-4fdd-44f1-8618-5a2d07b5ab27 was opened by the sanctions_or_pep detector on entity enti_sim_nort_sr7cv2o3u, a PERSON record labeled 'Potential Pep 0' under the Northwind Payroll program. The alert was generated because screening flagged a potential PEP match. The triggering activity is a single completed outgoing ACH credit of $1,411.70 dated 2026-07-16, with counterparty cpty_sim_nort_3y4c9h114a (country unknown) and no return code. What the evidence shows. The alert score is 15, placing it in the 'clear' band, with hard_signal false. The only contributing signal is entity.pep_potential at weight 15. The transfer itself carries the same score and band (15, clear, n=132, confidence 0.56). The entity record shows verification VERIFIED, high_risk false, review reasons none, and a recent screening date of 2026-09-01. The transfer amount ($1,411.70) is small relative to the program's declared monthly volume ($2,500,000.00). The route reason is 'detector always reviewed,' indicating this alert opens automatically for any PEP-potential hit regardless of severity. Program-level KRIs show pep_flagged_entities and high_risk_entity_share at 'watch' status (1 of 33 entities, 6.1% share) and manual_review_aging_hours at 'breach' (1434.7 hours, n=12), but these are portfolio-wide metrics not specific to this entity or transfer. No sanctioned_country_transfers, no counterparty concentration issue, and ach return rates are all in the 'ok' range. What was checked. Reviewed the detector output, transfer-level score and band, entity verification and screening status, review reasons field, and program KRIs for corroborating patterns (sanctioned country exposure, high-risk entity share, return rates). No prior dispositions exist for this alert. What is recommended. The entity is verified, carries no open review reasons, and was screened within the last three weeks. The transfer is completed, small in dollar terms relative to declared volume, and carries no adverse return code. The alert score is in the clear band with no hard signal. Nothing in the evidence indicates a need to hold funds or escalate a broader pattern tied to this specific alert. The program-level manual_review_aging_hours breach and PEP/high-risk-share watch flags are noted for awareness but pertain to portfolio monitoring, not this entity's transaction. Recommend closing this alert.

{
  "n": 132,
  "band": "clear",
  "skoor": 15,
  "signals": [
    {
      "code": "entity.pep_potential",
      "detail": "potential PEP match",
      "weight": 15
    }
  ],
  "routeReason": "detector always reviewed"
}