Activity on an entity flagged by screening (PEP status no, high risk).

What happened. Alert 63d9fc0a-c772-4bd3-a704-503c809bd463 was opened by the sanctions_or_pep detector for entity enti_sim_harb_skonrvy3x6, which screening has flagged as high risk (not PEP). The detector routes to review on every hit regardless of score; the route reason confirms this ('detector always reviewed'). The associated activity is a single settled ACH outgoing credit of $378.08 USD (acht_sim_harb_af8pf8z57xy), created 2026-08-28. What the evidence shows. The alert score is 20, banded 'clear,' with hard_signal false. The only contributing signal is entity.high_risk (+20); there is no PEP flag, no adverse review reasons, and the entity's verification status is VERIFIED. Last screening was 2026-08-27, one day before the transfer. The transfer itself settled with no return code and no counterparty country data flagged as sanctioned. Program KRIs show most metrics in 'ok' or 'watch' range; two items are in 'breach' (manual_review_aging_hours=1438.0 hours, ach_unauthorized_return_rate=0.0102), but these are program-wide metrics not specific to this entity or transfer, and nothing in the evidence links them to this alert's subject. What was checked. Detector output and score band, hard-signal flag, entity screening record (PEP status, verification, review reasons, last screened date), transfer status and return code, counterparty record, program KRI panel, and prior dispositions (none on file). What is recommended. No evidence here indicates a person needs to intervene on this specific transfer: the transfer already settled with no return, the entity is verified, PEP is no, and the score sits in the clear band with no hard signal. The elevated program-level KRIs (manual_review_aging_hours, ach_unauthorized_return_rate) are not tied to this entity or transfer in the evidence provided and should be tracked at the program level separately, not through this alert.

{
  "n": 1585,
  "band": "clear",
  "skoor": 20,
  "signals": [
    {
      "code": "entity.high_risk",
      "detail": "entity marked high risk by screening",
      "weight": 20
    }
  ],
  "routeReason": "detector always reviewed"
}