Alert · reviewed · open

Entity velocity spiked: 2 transfers and $4,806.03 in 24 hours.

Detector: velocity_spike
Severity: medium
Program: Lantern Lending (simulated)
Subject: entity enti_sim_lant_6tljrrozci6
Transfer: acht_sim_lant_20rf0hescop · $1,610.60 · ach outgoing
Skoor at alert: 10 clear
Hard signal: no
Policy: policy-v1
Opened: 2026-09-17 19:30Z
Closed: —
Decision clock: none · due — no clock
Escalated: —

Draft narrative

What happened. A velocity_spike alert fired on entity enti_sim_lant_6tljrrozci6 (Grove Co 318) after the system detected 2 transfers totaling $4,806.03 within 24 hours, exceeding twice the program's daily average. What the evidence shows. The alert carries a single signal, velocity.sum_24h_gt_2x_daily_avg, weighted 10, producing a score of 10 in the clear band with n=35 and confidence 0.3175. Hard signal is false. The referenced transfer, acht_sim_lant_20rf0hescop, is an ACH outgoing credit for $1,610.60, status SETTLED, with no return code, indicating no failure or reversal. The entity is a VERIFIED business, not flagged high risk, not PEP, with no open review reasons, last screened 2026-06-26. The program (Lantern Lending) declares $900,000.00 monthly volume; the alerted 24h sum of $4,806.03 is a small fraction of that. There are no prior dispositions on this entity. What was checked. Alert evidence and scoring, the linked transfer's status and return code, the program's declared volume and rails, the entity's verification, risk, and screening status, and prior disposition history. What is recommended. No evidence here requires a person to intervene before funds move; the underlying transfer has already settled with no return code, and the entity carries no other risk indicators. This should be closed. If further velocity spikes occur, or if the entity accumulates additional signals, that pattern would warrant escalation.

Recommendation

Confidence

0.80

Model

claude-sonnet-5

Drafted

2026-09-17 19:30Z

Rationale

Score is in the clear band (10) with a single moderate-weight signal and no hard signal flag.
Referenced transfer is SETTLED with no return code, indicating no operational failure.
Entity is VERIFIED, not high risk, not PEP, with no open review reasons.
Alerted volume ($4,806.03) is a small fraction of the program's declared $900,000.00 monthly volume.
No prior dispositions exist to suggest a recurring or escalating pattern.

Evidence

{
  "n": 35,
  "band": "clear",
  "skoor": 10,
  "signals": [
    {
      "code": "velocity.sum_24h_gt_2x_daily_avg",
      "detail": "24h sum above 2× the program daily average",
      "weight": 10
    }
  ],
  "routeReason": "detector not auto-closable"
}

Skoor signals

Signal	Weight	Hard	Detail
velocity.sum_24h_gt_2x_daily_avg	+10		24h sum above 2× the program daily average

Decision

Dispositions

No disposition yet.

Actions

Freeze, request to program, and suspend need a second, distinct approver. Clear hold, cancel, and pause execute on the requester's approval. Executed through the bank's own API with the tenant's sandbox key; a dry run when there is none.

No actions requested.