Alert · reviewed · open
Activity on an entity flagged by screening (PEP status potential).
- Detector
- sanctions_or_pep
- Severity
- high
- Program
- Meridian Remit (simulated)
- Subject
- entity enti_sim_meri_28dfpclz9pj
- Transfer
- acht_sim_meri_4zj0zkgec6o · $336.20 · ach outgoing
- Skoor at alert
- 15 clear
- Hard signal
- no
- Policy
- policy-v1
- Opened
- 2026-09-17 19:32Z
- Closed
- —
- Decision clock
- none · due — no clock
- Escalated
- —
Draft narrative
What happened. An alert fired on entity enti_sim_meri_28dfpclz9pj under the sanctions_or_pep detector, which the route reason states always reviews regardless of score. The entity carries a potential PEP flag. The one transfer tied to this alert, acht_sim_meri_4zj0zkgec6o, is a settled ACH outgoing credit of $336.20 with no return code.
What the evidence shows. The transfer-level skoor is 15, band clear, with a single signal entity.pep_potential contributing +15 weight. Hard signal is false. The entity record shows verification status VERIFIED, high_risk false, and review reasons listed as none, with a last screening date of 2026-08-22. The transfer settled with no return code, indicating no rail-level rejection. Program-level KRIs show several breaches (reserve_coverage_ratio, manual_review_aging_hours, ach_unauthorized_return_rate, sanctioned_country_transfers), but none of these are linked in the evidence to this specific entity or transfer, and the counterparty's country is listed as unknown rather than a sanctioned country.
What was checked. Reviewed the alert evidence, the transfer record and its settlement status, the entity record including verification status and review reasons, the program KRI panel, and prior dispositions. Prior dispositions show none on file for this alert.
What is recommended. Close the alert. The entity is already verified with no open review reasons, the score sits in the clear band with no hard signal, and the associated transfer settled without incident. The PEP-potential flag appears to have been assessed as part of standard screening rather than indicating unresolved risk. The program-level KRI breaches are noted for separate program-level monitoring but do not attach to this subject or transfer in the evidence provided.
- Recommendation
- close
- Confidence
- 0.72
- Model
- claude-sonnet-5
- Drafted
- 2026-09-17 19:32Z
- Rationale
- Transfer skoor is 15, band clear, hard_signal false.
- Entity verification status is VERIFIED with review reasons none.
- Transfer acht_sim_meri_4zj0zkgec6o settled with no return code.
- Route reason indicates this detector always routes to review regardless of score, which explains why a clear-band alert reached this queue.
- Program KRI breaches (reserve_coverage_ratio, manual_review_aging_hours, ach_unauthorized_return_rate, sanctioned_country_transfers) are not evidenced as connected to this specific entity or transfer, so they do not change the disposition of this alert but may warrant separate program-level attention.
- No prior dispositions exist to indicate a recurring pattern for this entity.
Evidence
{
"n": 983,
"band": "clear",
"skoor": 15,
"signals": [
{
"code": "entity.pep_potential",
"detail": "potential PEP match",
"weight": 15
}
],
"routeReason": "detector always reviewed"
}
Skoor signals
| Signal | Weight | Hard | Detail |
|---|---|---|---|
| entity.pep_potential | +15 | potential PEP match |
Decision
Sign in as an operator to decide. Operator sign-in →
Dispositions
No disposition yet.
Actions
Freeze, request to program, and suspend need a second, distinct approver. Clear hold, cancel, and pause execute on the requester's approval. Executed through the bank's own API with the tenant's sandbox key; a dry run when there is none.
No actions requested.