Alert · reviewed · open
Activity on an entity flagged by screening (PEP status potential).
- Detector
- sanctions_or_pep
- Severity
- high
- Program
- Lantern Lending (simulated)
- Subject
- entity enti_sim_lant_866sn4vcjd
- Transfer
- acht_sim_lant_2fdfkd7hefw · $677.00 · ach outgoing
- Skoor at alert
- 15 clear
- Hard signal
- no
- Policy
- policy-v1
- Opened
- 2026-09-17 19:32Z
- Closed
- —
- Decision clock
- none · due — no clock
- Escalated
- —
Draft narrative
What happened. Alert ac79f57d-07af-4bae-b1db-2ee1764099c6 fired the sanctions_or_pep detector on entity enti_sim_lant_866sn4vcjd after a PEP-potential screening match. The detector routes to review on any PEP-potential hit regardless of score. The associated transfer is a $677.00 outgoing ACH credit (acht_sim_lant_2fdfkd7hefw), already settled, with no return code.
What the evidence shows. The transfer-level skoor is 15, band clear, hard_signal false, based on a single signal (entity.pep_potential, weight 15) out of a population of 781. The entity is VERIFIED, high_risk is false, and review reasons are listed as none. Last screening was 2026-09-01, sixteen days before this alert opened, and program-wide stale_screening_share is 0, so the screening is current. The transfer amount ($677.00) is far below the program's declared monthly volume ($900,000.00) and carries no return code, so no ACH failure or reversal is indicated.
What was checked. Reviewed the alert evidence block, the transfer record and its skoor/signal detail, the entity record (verification status, high-risk flag, review reasons, screening date), and program KRIs. pep_flagged_entities is 1 of 33 entities (watch, not breach). stale_screening_share is 0 (ok). high_risk_entity_share is 0.03 (ok). verification_denial_rate is 0.03 (ok). ach_overall_return_rate and ach_unauthorized_return_rate are near zero (ok). manual_review_aging_hours shows a breach (1433.57 hours, n=8), but this is a program-wide operational metric, not evidence tied to this entity or transfer. No prior dispositions exist for this alert.
What is recommended. No field in this record shows a confirmed PEP status, a review reason, a high-risk flag, or a transfer irregularity. The entity is verified and screening is current. The transfer is small, settled, and unreturned. Recommend closing the alert. Separately, the program's manual_review_aging_hours breach (1433.57 hours) should be flagged to the program owner as an operational matter unrelated to this specific alert's disposition.
- Recommendation
- close
- Confidence
- 0.78
- Model
- claude-sonnet-5
- Drafted
- 2026-09-17 19:32Z
- Rationale
- Transfer skoor 15, band clear, hard_signal false, based on a single 15-weight signal.
- Entity verification is VERIFIED, high_risk false, review reasons none.
- Screening dated 2026-09-01 is recent relative to the 2026-09-17 alert open date; program stale_screening_share is 0.
- Transfer of $677.00 is settled with no return code and is immaterial relative to declared monthly volume of $900,000.00.
- Program KRIs pep_flagged_entities, high_risk_entity_share, verification_denial_rate, and ACH return rates are all at ok/watch levels, showing no pattern of concern tied to this entity.
- manual_review_aging_hours breach is a program-level operational signal, not evidence against this specific entity or transfer, and does not change the disposition of this alert.
Evidence
{
"n": 781,
"band": "clear",
"skoor": 15,
"signals": [
{
"code": "entity.pep_potential",
"detail": "potential PEP match",
"weight": 15
}
],
"routeReason": "detector always reviewed"
}
Skoor signals
| Signal | Weight | Hard | Detail |
|---|---|---|---|
| entity.pep_potential | +15 | potential PEP match |
Decision
Sign in as an operator to decide. Operator sign-in →
Dispositions
No disposition yet.
Actions
Freeze, request to program, and suspend need a second, distinct approver. Clear hold, cancel, and pause execute on the requester's approval. Executed through the bank's own API with the tenant's sandbox key; a dry run when there is none.
No actions requested.