SKOOR Risk Money movement. Skoored by AI.

Alert · reviewed · open

Activity on an entity flagged by screening (PEP status potential).

Detector
sanctions_or_pep
Severity
high
Program
Meridian Remit (simulated)
Subject
entity enti_sim_meri_28dfpclz9pj
Transfer
acht_sim_meri_po5wjc0ba3 · $1,178.94 · ach outgoing
Skoor at alert
15 clear
Hard signal
no
Policy
policy-v1
Opened
2026-09-17 19:31Z
Closed
Decision clock
none · due — no clock
Escalated

Draft narrative

What happened. Alert a303d117-4c53-4515-9a3f-2759b899c810 was generated by the sanctions_or_pep detector on entity enti_sim_meri_28dfpclz9pj, a PERSON labeled 'Potential Pep 2' under the Meridian Remit program. The alert cites a single signal, entity.pep_potential, weight 15, producing a skoor of 15 in the 'clear' band with hard_signal false. The route reason states the detector is always reviewed regardless of score. The linked transfer is an ACH outgoing debit of $1,178.94 USD, status SETTLED, with no return code, dated 2026-08-19. What the evidence shows. The entity record shows verification status VERIFIED, high_risk false, review reasons 'none', and last screened 2026-06-25. The transfer-level skoor is also 15/clear with confidence 1, driven by the same single PEP-potential signal. There is no hard signal and no other risk signal (no sanctioned-country flag, no unauthorized or administrative return, counterparty country unknown but not flagged). Program KRIs show pep_flagged_entities at 1 of 30 entities (watch, not breach), stale_screening_share at 0 (ok), verification_denial_rate at 3.3% (ok), and sanctioned_country_transfers at 0 across 471 transfers (ok). Two KRIs are in worse states -- hold_aging_hours (watch) and manual_review_aging_hours (breach) -- but neither is specific to this entity or this transfer, and no prior dispositions exist tying them to this alert. What was checked. Reviewed the alert signal and skoor composition, the entity's verification and screening status, the linked transfer's status and return code, the program's declared volume and rails, and the full KRI panel for corroborating patterns (PEP concentration, screening staleness, sanctioned-country activity, denial rate). No prior dispositions exist for this entity or transfer to compare against. What is recommended. The transfer has already settled, so a hold-based release is not applicable. The entity is verified with no open review reasons, screening is current relative to program norms (stale_screening_share 0), and the only signal is a potential PEP match that was previously reviewed and cleared to VERIFIED status. Program-wide PEP concentration is low (1 of 30, watch not breach) and unrelated to this specific transfer. Nothing in the evidence indicates a person needs to intervene before this record is closed. The manual_review_aging_hours breach and hold_aging_hours watch are program-level conditions that should be tracked separately and are not evidence of an issue with this specific alert or transfer.
Recommendation
close
Confidence
0.78
Model
claude-sonnet-5
Drafted
2026-09-17 19:31Z
Rationale
  • Skoor 15 in clear band, hard_signal false, single low-weight signal (entity.pep_potential, weight 15).
  • Entity verification status is VERIFIED with high_risk false and review reasons 'none'.
  • Transfer is SETTLED with no return code; no sanctioned-country or return-rate signals present.
  • Program KRIs relevant to PEP/sanctions exposure (pep_flagged_entities, stale_screening_share, sanctioned_country_transfers, verification_denial_rate) are all at ok or watch, not breach.
  • No prior dispositions exist to suggest a recurring or escalating pattern for this entity.
  • Transfer already settled, so 'release' is not applicable; no evidence requires holding funds or escalating beyond this single low-severity alert.

Evidence

{
  "n": 610,
  "band": "clear",
  "skoor": 15,
  "signals": [
    {
      "code": "entity.pep_potential",
      "detail": "potential PEP match",
      "weight": 15
    }
  ],
  "routeReason": "detector always reviewed"
}

Skoor signals

SignalWeightHardDetail
entity.pep_potential+15potential PEP match

Decision

Sign in as an operator to decide. Operator sign-in →

Dispositions

No disposition yet.

Actions

Freeze, request to program, and suspend need a second, distinct approver. Clear hold, cancel, and pause execute on the requester's approval. Executed through the bank's own API with the tenant's sandbox key; a dry run when there is none.

No actions requested.