Alert · reviewed · open
Activity on an entity flagged by screening (PEP status potential).
- Detector
- sanctions_or_pep
- Severity
- high
- Program
- Meridian Remit (simulated)
- Subject
- entity enti_sim_meri_28dfpclz9pj
- Transfer
- acht_sim_meri_po5wjc0ba3 · $1,178.94 · ach outgoing
- Skoor at alert
- 15 clear
- Hard signal
- no
- Policy
- policy-v1
- Opened
- 2026-09-17 19:31Z
- Closed
- —
- Decision clock
- none · due — no clock
- Escalated
- —
Draft narrative
What happened. Alert a303d117-4c53-4515-9a3f-2759b899c810 was generated by the sanctions_or_pep detector on entity enti_sim_meri_28dfpclz9pj, a PERSON labeled 'Potential Pep 2' under the Meridian Remit program. The alert cites a single signal, entity.pep_potential, weight 15, producing a skoor of 15 in the 'clear' band with hard_signal false. The route reason states the detector is always reviewed regardless of score. The linked transfer is an ACH outgoing debit of $1,178.94 USD, status SETTLED, with no return code, dated 2026-08-19.
What the evidence shows. The entity record shows verification status VERIFIED, high_risk false, review reasons 'none', and last screened 2026-06-25. The transfer-level skoor is also 15/clear with confidence 1, driven by the same single PEP-potential signal. There is no hard signal and no other risk signal (no sanctioned-country flag, no unauthorized or administrative return, counterparty country unknown but not flagged). Program KRIs show pep_flagged_entities at 1 of 30 entities (watch, not breach), stale_screening_share at 0 (ok), verification_denial_rate at 3.3% (ok), and sanctioned_country_transfers at 0 across 471 transfers (ok). Two KRIs are in worse states -- hold_aging_hours (watch) and manual_review_aging_hours (breach) -- but neither is specific to this entity or this transfer, and no prior dispositions exist tying them to this alert.
What was checked. Reviewed the alert signal and skoor composition, the entity's verification and screening status, the linked transfer's status and return code, the program's declared volume and rails, and the full KRI panel for corroborating patterns (PEP concentration, screening staleness, sanctioned-country activity, denial rate). No prior dispositions exist for this entity or transfer to compare against.
What is recommended. The transfer has already settled, so a hold-based release is not applicable. The entity is verified with no open review reasons, screening is current relative to program norms (stale_screening_share 0), and the only signal is a potential PEP match that was previously reviewed and cleared to VERIFIED status. Program-wide PEP concentration is low (1 of 30, watch not breach) and unrelated to this specific transfer. Nothing in the evidence indicates a person needs to intervene before this record is closed. The manual_review_aging_hours breach and hold_aging_hours watch are program-level conditions that should be tracked separately and are not evidence of an issue with this specific alert or transfer.
- Recommendation
- close
- Confidence
- 0.78
- Model
- claude-sonnet-5
- Drafted
- 2026-09-17 19:31Z
- Rationale
- Skoor 15 in clear band, hard_signal false, single low-weight signal (entity.pep_potential, weight 15).
- Entity verification status is VERIFIED with high_risk false and review reasons 'none'.
- Transfer is SETTLED with no return code; no sanctioned-country or return-rate signals present.
- Program KRIs relevant to PEP/sanctions exposure (pep_flagged_entities, stale_screening_share, sanctioned_country_transfers, verification_denial_rate) are all at ok or watch, not breach.
- No prior dispositions exist to suggest a recurring or escalating pattern for this entity.
- Transfer already settled, so 'release' is not applicable; no evidence requires holding funds or escalating beyond this single low-severity alert.
Evidence
{
"n": 610,
"band": "clear",
"skoor": 15,
"signals": [
{
"code": "entity.pep_potential",
"detail": "potential PEP match",
"weight": 15
}
],
"routeReason": "detector always reviewed"
}
Skoor signals
| Signal | Weight | Hard | Detail |
|---|---|---|---|
| entity.pep_potential | +15 | potential PEP match |
Decision
Sign in as an operator to decide. Operator sign-in →
Dispositions
No disposition yet.
Actions
Freeze, request to program, and suspend need a second, distinct approver. Clear hold, cancel, and pause execute on the requester's approval. Executed through the bank's own API with the tenant's sandbox key; a dry run when there is none.
No actions requested.