The entity's first transfer, $704.16, above the program median, came 0.0 hours after verification.

What happened. Alert 5d5ec952-502e-4704-9ddd-0468ba3405f8 fired on rapid_onboarding logic for transfer acht_sim_harb_29xx9l9b40n, an outgoing ACH debit of $704.16 from entity Juniper LLC 121 under the Harbor Marketplace Payouts program. The detector flagged that this was the entity's first transfer, occurring 0.0 hours after verification, and that the amount exceeds the program median of $481.55. What the evidence shows. The transfer has already settled, with no return code recorded. The entity is a VERIFIED US business with high_risk=false, pep=no, and no review reasons on file; it was last screened 2026-07-01. The alert's own scoring fields are unpopulated: skoor is null, band is unscored, confidence is null, and n=4, indicating a small sample size behind any statistical basis for this detector. The route reason given is 'detector not auto-closable' rather than any substantive risk finding. There are no prior dispositions on this entity or transfer. What was checked. Reviewed the transfer record (status, amount, return code, counterparty), the entity verification and screening status, the program's declared volume and rails, and the alert's evidence block including scoring fields and threshold configuration. No prior alert history exists for cross-reference. What is recommended. Close the alert. The transfer has settled cleanly with no return code, the entity is verified with no high-risk or PEP flags and no open review reasons, and the amount above median alone does not establish risk absent a scored model output. The detector's rapid-onboarding logic appears to have triggered on a first transaction pattern common to new legitimate entities rather than on a specific risk indicator. Confidence is limited because the underlying scoring is unpopulated (skoor null, unscored band, n=4), so this reflects the evidence as given rather than a validated risk score.

{
  "n": 4,
  "band": "unscored",
  "skoor": null,
  "typology": "rapid_onboarding",
  "confidence": null,
  "thresholds": {
    "hours": 24
  },
  "medianCents": "48155",
  "routeReason": "detector not auto-closable",
  "hoursSinceVerification": 0
}