Alert · reviewed · open

The entity's first transfer, $729.51, above the program median, came 0.0 hours after verification.

Detector: rapid_onboarding
Severity: medium
Program: Harbor Marketplace Payouts (simulated)
Subject: transfer acht_sim_harb_1q2zyd1144w
Transfer: acht_sim_harb_1q2zyd1144w · $729.51 · ach outgoing
Skoor at alert: 10 clear
Hard signal: no
Policy: policy-v1
Opened: 2026-09-17 19:30Z
Closed: —
Decision clock: none · due — no clock
Escalated: —

Draft narrative

What happened. A rapid_onboarding alert fired on the entity's first transfer, a $729.51 outgoing ACH credit that settled 0.0 hours after the entity's verification completed. What the evidence shows. The transfer amount ($729.51) is above the program median ($481.91) but not by an extreme multiple. The transfer skoor is 10, band clear, with confidence 0.3 based on n=40. The only signal present is counterparty.first_time(+10), which is expected for a first transfer. The transfer status is SETTLED with no return code. The entity is a VERIFIED person, not high risk, not PEP, with no review reasons and screening current as of 2026-07-08, three days before the transfer. Program-level KRIs show ok status for frozen_accounts, overdraft_events, stale_screening_share, and verification_denial_rate; pep_flagged_entities and high_risk_entity_share are flagged watch but at the program level (1 of 30 and 2 of 30 entities), not tied to this entity, which is neither PEP nor high risk. Velocity, reserve, and return-rate KRIs are unmeasured (n=0). What was checked. Transfer status and return code, entity verification and risk flags, screening recency, program declared volume against transfer size, skoor band and hard-signal status, and program KRI panel for related risk indicators. No prior dispositions exist for this entity or alert. What is recommended. Close the alert. The transfer has already settled with no return, the entity is verified with no adverse flags, and the score sits in the clear band with only the expected first-time-counterparty signal. There is no basis in this evidence for a hold (funds already settled) or escalation (no pattern across entities or program KRIs implicates this alert).

Recommendation

Confidence

0.62

Model

claude-sonnet-5

Drafted

2026-09-17 19:30Z

Rationale

Transfer status is SETTLED with no return code; no funds are in a holdable state.
Skoor is 10, band clear, hard_signal false; confidence is low (0.3) due to n=40, but no adverse signal beyond the expected first-time counterparty flag.
Entity is VERIFIED, not high risk, not PEP, no review reasons, and screening is recent (3 days before transfer).
Amount is above median but not an outsized multiple, consistent with a plausible first payout rather than a red flag on its own.
Program KRIs implicating PEP and high-risk share are program-wide watch items, not attributable to this entity or transfer.
No prior dispositions exist to suggest a repeat or escalating pattern for this entity.

Evidence

{
  "n": 40,
  "band": "clear",
  "skoor": 10,
  "typology": "rapid_onboarding",
  "confidence": 0.3,
  "thresholds": {
    "hours": 24
  },
  "medianCents": "48191",
  "routeReason": "detector not auto-closable",
  "hoursSinceVerification": 0
}

Skoor signals

Signal	Weight	Hard	Detail
counterparty.first_time	+10		first transfer with this counterparty

Decision

Dispositions

No disposition yet.

Actions

Freeze, request to program, and suspend need a second, distinct approver. Clear hold, cancel, and pause execute on the requester's approval. Executed through the bank's own API with the tenant's sandbox key; a dry run when there is none.

No actions requested.