Activity on an entity flagged by screening (PEP status no, high risk).

What happened. Alert 6e56dfb2-c4a5-4fe3-b493-c115413e8511 was generated by the sanctions_or_pep detector for entity enti_sim_nort_91eod4q93y, which screening marked high risk. The alert was opened 2026-09-17T19:30:10.688Z and routed to review because this detector is always reviewed regardless of score. What the evidence shows. The entity screening record shows PEP status no, review reasons none, verification status VERIFIED, and last screened 2026-06-26T12:01:30.000Z. The only signal driving the score is entity.high_risk (+20), giving a skoor of 20 in the clear band with hard_signal false. The associated transfer, acht_sim_nort_6bv8f9q5ae, is a $1122.68 USD outgoing ACH debit under the Northwind Payroll program, already SETTLED with no return code. Counterparty country is unknown but no other signal or review reason attaches to this counterparty or transaction. What was checked. I checked the screening result (PEP no, verification status, review reasons), the transfer status and amount against the declared program volume ($2,500,000.00/month, ACH, US), the skoor and band for both the alert and the transfer, and prior dispositions, of which there are none. Model confidence on the transfer skoor is 0.355 with n=44, which is a thin sample for confidence in the score itself, though the underlying entity attributes (PEP no, no review reasons, verified) are directly stated fields, not scored inferences. What is recommended. No signal beyond the single high-risk flag is present, the entity is verified, PEP status is no, and there are no review reasons. The transfer has already settled, so holding funds is not an option and release does not apply since nothing was held. Recommend closing the alert. A person should still note that this is a first alert on this entity and no prior dispositions exist, so if the high-risk flag recurs on future activity it should be reviewed again.

{
  "n": 44,
  "band": "clear",
  "skoor": 20,
  "signals": [
    {
      "code": "entity.high_risk",
      "detail": "entity marked high risk by screening",
      "weight": 20
    }
  ],
  "routeReason": "detector always reviewed"
}