Alert · reviewed · open

The entity's first transfer, $1,758.50, above the program median, came 0.0 hours after verification.

Detector: rapid_onboarding
Severity: medium
Program: Lantern Lending (simulated)
Subject: transfer acht_sim_lant_bct1ih23cm1
Transfer: acht_sim_lant_bct1ih23cm1 · $1,758.50 · ach outgoing
Skoor at alert: null unscored
Hard signal: no
Policy: policy-v1
Opened: 2026-09-17 19:30Z
Closed: —
Decision clock: none · due — no clock
Escalated: —

Draft narrative

What happened. The rapid_onboarding detector fired on entity Cedar Services 32's first transfer, an outgoing ACH debit of $1,758.50, which settled 0.0 hours after the entity's identity verification was completed. What the evidence shows. The transfer amount ($1,758.50) is only modestly above the program median ($1,711.18), not a large multiple of it. The transfer status is SETTLED with no return code, indicating no rail-level failure. The entity is VERIFIED, not flagged high risk, not PEP, has no review reasons on file, and was screened on 2026-06-23. The counterparty's country is unknown but no other adverse data is present. The transfer and entity skoor are both null/unscored (n=13, confidence null), so no model-based risk signal is available beyond the raw evidence. There are no prior dispositions on this entity. What was checked. Program declared volume ($900,000.00/month, ACH, US) versus the single transfer amount; verification timestamp versus transfer creation timestamp; entity risk flags (high risk, PEP, review reasons); transfer settlement status and return code; scoring band and confidence; prior disposition history. What is recommended. The transfer has already settled; there is no held transfer to release. No evidence here (settlement status, entity risk flags, amount relative to median) indicates a problem requiring intervention. Close the alert.

Recommendation

Confidence

0.68

Model

claude-sonnet-5

Drafted

2026-09-17 19:30Z

Rationale

Transfer status is SETTLED with no return code, so no failed or reversed movement of funds to act on.
Entity is VERIFIED, not high risk, not PEP, with no review reasons and no prior dispositions.
Transfer amount ($1,758.50) is close to, not dramatically above, the program median ($1,711.18).
Scoring is unscored (skoor null, confidence null) and sample size is small (n=13), which limits confidence but does not itself indicate risk absent other signals.
Hard signal is false and route reason is only 'detector not auto-closable,' not an indication of substantive risk found.

Evidence

{
  "n": 13,
  "band": "unscored",
  "skoor": null,
  "typology": "rapid_onboarding",
  "confidence": null,
  "thresholds": {
    "hours": 24
  },
  "medianCents": "171118",
  "routeReason": "detector not auto-closable",
  "hoursSinceVerification": 0
}

Decision

Dispositions

No disposition yet.

Actions

Freeze, request to program, and suspend need a second, distinct approver. Clear hold, cancel, and pause execute on the requester's approval. Executed through the bank's own API with the tenant's sandbox key; a dry run when there is none.

No actions requested.