Activity on an entity flagged by screening (PEP status no, high risk).

What happened. Alert 6f56550e-4023-4d5b-bfce-713216c6c196 fired on entity enti_sim_harb_skonrvy3x6 under the sanctions_or_pep detector because the entity is marked high risk by screening. The alert scored 20 (band clear, hard_signal false) and was routed to review only because this detector always routes high-risk entities regardless of score. The transfer in scope is an outgoing ACH credit of $357.70 USD (acht_sim_harb_3gjbb7kq7af), status SETTLED, no return code. What the evidence shows. The entity is a VERIFIED business, PEP status is no, review reasons are none, and it was last screened 2026-06-26. The only signal present is entity.high_risk (+20), which alone keeps the alert in the clear band. The transfer itself settled with no return code and no counterparty country data flagged as high risk. Transfer-level skoor is also 20/clear with n=1320 and confidence=1. No prior dispositions exist for this entity. What was checked. Reviewed the alert signals, entity verification status, PEP flag, review reasons, and screening date. Reviewed the transfer status and return code. Reviewed program KRIs for related context: high_risk_entity_share is at 0.067 (watch), pep_flagged_entities at 1/30 (watch), manual_review_aging_hours is in breach (1438 hours), and ach_unauthorized_return_rate is in breach (0.0104). None of these KRIs are specific to this entity or this transfer; they reflect program-wide conditions and are not tied by the evidence to this alert. What is recommended. Close this alert. The entity is verified, not PEP, has no open review reasons, and the only signal is the high-risk flag that already keeps it in the clear band. The associated transfer settled without incident. The transfer is not held, so no release action applies. The program-level KRI breaches (manual_review_aging_hours, ach_unauthorized_return_rate) are noted for separate operational review but do not provide entity-specific evidence to escalate this particular alert.

{
  "n": 1320,
  "band": "clear",
  "skoor": 20,
  "signals": [
    {
      "code": "entity.high_risk",
      "detail": "entity marked high risk by screening",
      "weight": 20
    }
  ],
  "routeReason": "detector always reviewed"
}