SKOOR Risk Money movement. Skoored by AI.

Alert · reviewed · open

Activity on an entity flagged by screening (PEP status potential).

Detector
sanctions_or_pep
Severity
high
Program
Lantern Lending (simulated)
Subject
entity enti_sim_lant_866sn4vcjd
Transfer
acht_sim_lant_2fdfkd7hefw · $677.00 · ach outgoing
Skoor at alert
15 clear
Hard signal
no
Policy
policy-v1
Opened
2026-09-17 19:32Z
Closed
Decision clock
none · due — no clock
Escalated

Draft narrative

What happened. Alert ac79f57d-07af-4bae-b1db-2ee1764099c6 fired the sanctions_or_pep detector on entity enti_sim_lant_866sn4vcjd after a PEP-potential screening match. The detector routes to review on any PEP-potential hit regardless of score. The associated transfer is a $677.00 outgoing ACH credit (acht_sim_lant_2fdfkd7hefw), already settled, with no return code. What the evidence shows. The transfer-level skoor is 15, band clear, hard_signal false, based on a single signal (entity.pep_potential, weight 15) out of a population of 781. The entity is VERIFIED, high_risk is false, and review reasons are listed as none. Last screening was 2026-09-01, sixteen days before this alert opened, and program-wide stale_screening_share is 0, so the screening is current. The transfer amount ($677.00) is far below the program's declared monthly volume ($900,000.00) and carries no return code, so no ACH failure or reversal is indicated. What was checked. Reviewed the alert evidence block, the transfer record and its skoor/signal detail, the entity record (verification status, high-risk flag, review reasons, screening date), and program KRIs. pep_flagged_entities is 1 of 33 entities (watch, not breach). stale_screening_share is 0 (ok). high_risk_entity_share is 0.03 (ok). verification_denial_rate is 0.03 (ok). ach_overall_return_rate and ach_unauthorized_return_rate are near zero (ok). manual_review_aging_hours shows a breach (1433.57 hours, n=8), but this is a program-wide operational metric, not evidence tied to this entity or transfer. No prior dispositions exist for this alert. What is recommended. No field in this record shows a confirmed PEP status, a review reason, a high-risk flag, or a transfer irregularity. The entity is verified and screening is current. The transfer is small, settled, and unreturned. Recommend closing the alert. Separately, the program's manual_review_aging_hours breach (1433.57 hours) should be flagged to the program owner as an operational matter unrelated to this specific alert's disposition.
Recommendation
close
Confidence
0.78
Model
claude-sonnet-5
Drafted
2026-09-17 19:32Z
Rationale
  • Transfer skoor 15, band clear, hard_signal false, based on a single 15-weight signal.
  • Entity verification is VERIFIED, high_risk false, review reasons none.
  • Screening dated 2026-09-01 is recent relative to the 2026-09-17 alert open date; program stale_screening_share is 0.
  • Transfer of $677.00 is settled with no return code and is immaterial relative to declared monthly volume of $900,000.00.
  • Program KRIs pep_flagged_entities, high_risk_entity_share, verification_denial_rate, and ACH return rates are all at ok/watch levels, showing no pattern of concern tied to this entity.
  • manual_review_aging_hours breach is a program-level operational signal, not evidence against this specific entity or transfer, and does not change the disposition of this alert.

Evidence

{
  "n": 781,
  "band": "clear",
  "skoor": 15,
  "signals": [
    {
      "code": "entity.pep_potential",
      "detail": "potential PEP match",
      "weight": 15
    }
  ],
  "routeReason": "detector always reviewed"
}

Skoor signals

SignalWeightHardDetail
entity.pep_potential+15potential PEP match

Decision

Sign in as an operator to decide. Operator sign-in →

Dispositions

No disposition yet.

Actions

Freeze, request to program, and suspend need a second, distinct approver. Clear hold, cancel, and pause execute on the requester's approval. Executed through the bank's own API with the tenant's sandbox key; a dry run when there is none.

No actions requested.