SKOOR Risk Money movement. Skoored by AI.

Alert · reviewed · open

Activity on an entity flagged by screening (PEP status no, high risk).

Detector
sanctions_or_pep
Severity
high
Program
Harbor Marketplace Payouts (simulated)
Subject
entity enti_sim_harb_skonrvy3x6
Transfer
acht_sim_harb_aqx387br6bc · $198.58 · ach outgoing
Skoor at alert
20 clear
Hard signal
no
Policy
policy-v1
Opened
2026-09-17 19:30Z
Closed
Decision clock
none · due — no clock
Escalated

Draft narrative

What happened. Alert 5e03dbe1 fired on entity enti_sim_harb_skonrvy3x6 under the sanctions_or_pep detector after a $198.58 outgoing ACH debit (acht_sim_harb_aqx387br6bc) settled on 2026-08-06. The detector routes to review on every hit regardless of score, per routeReason 'detector always reviewed'. What the evidence shows. The only signal present is entity.high_risk (weight 20), which produced a skoor of 20, band clear, hard_signal false, confidence 0.91 on n=869. The entity record shows verification VERIFIED, pep no, high risk true, review reasons none, last screened 2026-06-26. No sanctioned-country transfer signal or unauthorized/administrative return code applies to this transfer; the transfer settled with return code none. Counterparty country is unknown but this did not trigger a country-based signal. Program-level KRIs show two items in breach (manual_review_aging_hours, ach_unauthorized_return_rate) and several in watch (hold_aging_hours, pep_flagged_entities, high_risk_entity_share), but none of these are tied to this specific entity or transfer in the evidence provided. What was checked. Reviewed alert signals and score, transfer status and return code, entity verification and screening history, and program KRI panel for related program-wide stress. No prior dispositions exist for this alert. What is recommended. Nothing in the evidence for this specific alert indicates an unresolved sanctions or PEP concern: the entity is verified, not PEP, has no adverse review reasons, and was screened within the last three months. The transfer settled without a return. This alert can be closed. The program-level KRI breaches (manual_review_aging_hours, ach_unauthorized_return_rate) are not linked to this entity or transfer and should be tracked separately if not already under review.
Recommendation
close
Confidence
0.78
Model
claude-sonnet-5
Drafted
2026-09-17 19:31Z
Rationale
  • Skoor 20, band clear, hard_signal false; only signal is entity.high_risk with no sanctions match detail.
  • Entity is VERIFIED, pep no, review reasons none, last screened 2026-06-26 (recent).
  • Transfer settled, return code none, no sanctioned-country or return-rate signal attached to this transaction.
  • Program KRI breaches (manual_review_aging_hours, ach_unauthorized_return_rate) are program-wide and not evidenced as connected to this entity or transfer.
  • Counterparty country unknown but no country-risk signal fired, so this is noted but not treated as an open issue.

Evidence

{
  "n": 869,
  "band": "clear",
  "skoor": 20,
  "signals": [
    {
      "code": "entity.high_risk",
      "detail": "entity marked high risk by screening",
      "weight": 20
    }
  ],
  "routeReason": "detector always reviewed"
}

Skoor signals

SignalWeightHardDetail
entity.high_risk+20entity marked high risk by screening

Decision

Sign in as an operator to decide. Operator sign-in →

Dispositions

No disposition yet.

Actions

Freeze, request to program, and suspend need a second, distinct approver. Clear hold, cancel, and pause execute on the requester's approval. Executed through the bank's own API with the tenant's sandbox key; a dry run when there is none.

No actions requested.