Alert · reviewed · open
Activity on an entity flagged by screening (PEP status no, high risk).
- Detector
- sanctions_or_pep
- Severity
- high
- Program
- Northwind Payroll (simulated)
- Subject
- entity enti_sim_nort_91eod4q93y
- Transfer
- acht_sim_nort_7hxipicx52 · $1,657.12 · ach outgoing
- Skoor at alert
- null unscored
- Hard signal
- no
- Policy
- policy-v1
- Opened
- 2026-09-17 19:30Z
- Closed
- —
- Decision clock
- none · due — no clock
- Escalated
- —
Draft narrative
What happened. Alert ab209938-e2c7-47ab-9ba2-038de7397f1e fired on entity enti_sim_nort_91eod4q93y under the sanctions_or_pep detector, which is configured to always route to review regardless of score. The entity is tied to one settled ACH outgoing debit of $1657.12 USD under the Northwind Payroll program.
What the evidence shows. The entity screening record shows PEP status no, high risk true, verification status VERIFIED, and review reasons listed as none. Last screening was 2026-06-26. The only evidence signal present is entity.high_risk with weight 20; there is no hard signal (hard_signal false) and the transfer/alert scores are unscored (band unscored, n=0). The associated transfer, acht_sim_nort_7hxipicx52, is already SETTLED with no return code, and its amount ($1657.12) is well within the program's declared monthly volume of $2,500,000.00. Counterparty country is unknown, but no adverse detail is attached to it. There are no prior dispositions on this entity.
What was checked. Reviewed the alert evidence block, the entity screening fields (PEP, high-risk, verification, review reasons), the transfer status and amount against declared program volume, and prior disposition history. No sanctions list match, adverse media reference, or PEP designation is present in the record.
What is recommended. Close the alert. The entity carries a generic high-risk screening tag with no PEP flag, no listed review reasons, and a verified status. The single associated transfer has already settled with no return code and falls within normal program activity. Nothing in the evidence indicates a match, hold condition, or need for further human review at this time.
- Recommendation
- close
- Confidence
- 0.62
- Model
- claude-sonnet-5
- Drafted
- 2026-09-17 19:30Z
- Rationale
- Detector routes to review by policy default, not because of a confirmed match; hard_signal is false and PEP is no.
- Entity review reasons field is explicitly none, and verification status is VERIFIED.
- The only scoring signal is a generic entity.high_risk weight of 20 with no corroborating signals; alert and transfer bands are unscored (n=0).
- The transfer is already SETTLED, so no funds are pending and release is not applicable.
- Transfer amount ($1657.12) is consistent with declared payroll program volume, with no return code or counterparty adverse detail.
- No prior dispositions exist to suggest a repeat or escalating pattern.
Evidence
{
"n": 0,
"band": "unscored",
"skoor": null,
"signals": [
{
"code": "entity.high_risk",
"detail": "entity marked high risk by screening",
"weight": 20
}
],
"routeReason": "detector always reviewed"
}
Skoor signals
| Signal | Weight | Hard | Detail |
|---|---|---|---|
| entity.high_risk | +20 | entity marked high risk by screening |
Decision
Sign in as an operator to decide. Operator sign-in →
Dispositions
No disposition yet.
Actions
Freeze, request to program, and suspend need a second, distinct approver. Clear hold, cancel, and pause execute on the requester's approval. Executed through the bank's own API with the tenant's sandbox key; a dry run when there is none.
No actions requested.