SKOOR Risk Money movement. Skoored by AI.

Alert · reviewed · open

Activity on an entity flagged by screening (PEP status potential).

Detector
sanctions_or_pep
Severity
high
Program
Meridian Remit (simulated)
Subject
entity enti_sim_meri_28dfpclz9pj
Transfer
acht_sim_meri_5lbtjb0dbf5 · $330.98 · ach outgoing
Skoor at alert
15 clear
Hard signal
no
Policy
policy-v1
Opened
2026-09-17 19:31Z
Closed
Decision clock
none · due — no clock
Escalated

Draft narrative

What happened. Screening flagged entity enti_sim_meri_28dfpclz9pj as a potential PEP match, generating a high-severity sanctions_or_pep alert. This alert routes to review by policy regardless of score. The associated transfer is a single settled ACH credit of $330.98 dated 2026-08-21. What the evidence shows. The entity-level skoor is 15, band clear, with hard_signal false. The only contributing signal is entity.pep_potential at weight 15. The entity record shows verification status VERIFIED, high_risk false, and review reasons listed as none, with last screening dated 2026-08-22T00:52:45.000Z, after the transfer date. The transfer itself settled with no return code and no sanctioned-country flag. Program-level KRIs show stale_screening_share at 0.0 (ok) and pep_flagged_entities at 1 of 30 (watch, not breach). Two KRIs show breach status (reserve_coverage_ratio, ach_unauthorized_return_rate, manual_review_aging_hours) but none of these are specific to this entity or transfer and the alert evidence does not link them to this subject. What was checked. Transfer status and return code, entity verification and high-risk flags, entity review reasons, screening recency relative to transfer date, program KRIs for stale screening and PEP concentration, and prior dispositions on this entity (none exist). What is recommended. No further action is needed on this alert. The entity has been screened and cleared with no open review reasons, verification is complete, the transfer settled without incident, and the skoor band is clear with no hard signal. The program-level KRI breaches are unrelated to this specific alert and should be tracked separately if not already under review.
Recommendation
close
Confidence
0.72
Model
claude-sonnet-5
Drafted
2026-09-17 19:31Z
Rationale
  • skoor band is clear (15) and hard_signal is false
  • entity review reasons field is explicitly 'none'
  • entity verification status is VERIFIED and high_risk is false
  • screening was performed after the transfer date, indicating current screening (stale_screening_share=0)
  • transfer already settled with no return code, so hold/release does not apply
  • program KRI breaches present but not tied to this entity or transfer in the evidence provided, so they do not by themselves justify escalation of this specific alert

Evidence

{
  "n": 649,
  "band": "clear",
  "skoor": 15,
  "signals": [
    {
      "code": "entity.pep_potential",
      "detail": "potential PEP match",
      "weight": 15
    }
  ],
  "routeReason": "detector always reviewed"
}

Skoor signals

SignalWeightHardDetail
entity.pep_potential+15potential PEP match

Decision

Sign in as an operator to decide. Operator sign-in →

Dispositions

No disposition yet.

Actions

Freeze, request to program, and suspend need a second, distinct approver. Clear hold, cancel, and pause execute on the requester's approval. Executed through the bank's own API with the tenant's sandbox key; a dry run when there is none.

No actions requested.