Alert · reviewed · open
Activity on an entity flagged by screening (PEP status potential).
- Detector
- sanctions_or_pep
- Severity
- high
- Program
- Meridian Remit (simulated)
- Subject
- entity enti_sim_meri_28dfpclz9pj
- Transfer
- acht_sim_meri_20d13mezc8j · $1,233.39 · ach outgoing
- Skoor at alert
- 15 clear
- Hard signal
- no
- Policy
- policy-v1
- Opened
- 2026-09-17 19:32Z
- Closed
- —
- Decision clock
- none · due — no clock
- Escalated
- —
Draft narrative
What happened. Alert 73990018-cf01-4916-8c3b-de2faaeb6865 was opened by the sanctions_or_pep detector on 2026-09-17 for entity enti_sim_meri_28dfpclz9pj, a person record with a potential PEP match. The alert is tied to one ACH outgoing credit transfer, acht_sim_meri_20d13mezc8j, for $1,233.39, created 2026-09-13 and already settled.
What the evidence shows. The entity screening record shows verification status VERIFIED, high_risk false, review reasons none, and last screened 2026-08-22. The transfer-level skoor is 15, band clear, driven solely by the entity.pep_potential signal at weight 15; hard_signal is false. The transfer settled with no return code. The counterparty's country is listed as unknown, which is a data gap but is not flagged as a sanctioned or high-risk jurisdiction in the evidence provided. Program-level KRIs show several breaches (reserve_coverage_ratio, manual_review_aging_hours, ach_unauthorized_return_rate, sanctioned_country_transfers), but none of these are linked in the evidence to this specific entity or transfer.
What was checked. Detector output and skoor band for the transfer, entity verification and review-reason fields, transfer status and return code, counterparty country field, and program KRI panel for related patterns. No prior dispositions exist for this alert.
What is recommended. The entity has already been screened and verified with no open review reasons, the transfer scored in the clear band with no hard signal, and the transfer has already settled, so there is no held transfer to act on. Nothing in the evidence requires a person to intervene on this specific alert. The counterparty country gap and program-level KRI breaches are noted for awareness but are not tied to this entity or transfer in the evidence and should be tracked separately rather than driving action on this alert.
- Recommendation
- close
- Confidence
- 0.62
- Model
- claude-sonnet-5
- Drafted
- 2026-09-17 19:32Z
- Rationale
- Entity verification status is VERIFIED with review reasons none and no high_risk flag.
- Transfer skoor is 15, band clear, hard_signal false; the only contributing signal is entity.pep_potential.
- Transfer already SETTLED with no return code, so no funds are pending or held.
- Counterparty country is unknown, a data gap, but no sanctioned-country signal attaches to this transfer specifically.
- Program KRI breaches (reserve_coverage_ratio, manual_review_aging_hours, ach_unauthorized_return_rate, sanctioned_country_transfers) are program-wide and not linked in the evidence to this entity or transfer, so they do not by themselves support escalation of this alert.
- No prior dispositions exist to indicate a recurring pattern for this entity.
Evidence
{
"n": 997,
"band": "clear",
"skoor": 15,
"signals": [
{
"code": "entity.pep_potential",
"detail": "potential PEP match",
"weight": 15
}
],
"routeReason": "detector always reviewed"
}
Skoor signals
| Signal | Weight | Hard | Detail |
|---|---|---|---|
| entity.pep_potential | +15 | potential PEP match |
Decision
Sign in as an operator to decide. Operator sign-in →
Dispositions
No disposition yet.
Actions
Freeze, request to program, and suspend need a second, distinct approver. Clear hold, cancel, and pause execute on the requester's approval. Executed through the bank's own API with the tenant's sandbox key; a dry run when there is none.
No actions requested.