Alert · reviewed · open

Activity on an entity flagged by screening (PEP status no, high risk).

Detector: sanctions_or_pep
Severity: high
Program: Meridian Remit (simulated)
Subject: entity enti_sim_meri_5if3mzfr9pn
Transfer: acht_sim_meri_anvtajla9tx · $612.79 · ach outgoing
Skoor at alert: null unscored
Hard signal: no
Policy: policy-v1
Opened: 2026-09-17 19:30Z
Closed: —
Decision clock: none · due — no clock
Escalated: —

Draft narrative

What happened. An alert fired on entity enti_sim_meri_5if3mzfr9pn under the sanctions_or_pep detector because screening marked the entity high risk. The associated transaction is a single settled ACH credit of $612.79 USD dated 2026-07-12, tied to program Meridian Remit. What the evidence shows. The entity record shows verification status VERIFIED, PEP status no, and review reasons none, last screened 2026-06-26. The only signal present is entity.high_risk with a weight of 20; there is no hard signal and the transfer/alert score is unscored (band unscored, n=29). The transfer itself is a routine outgoing ACH credit that has already settled, with no return code and an unknown counterparty country. There are no prior dispositions on this entity or alert. What was checked. Reviewed the alert evidence block, the transfer record, the program declaration, the entity screening record, and prior disposition history. No additional signals, hard-signal flags, or elevated score were found beyond the single high_risk designation. No pattern across multiple transfers or entities is present in the evidence provided. What is recommended. Given the entity is verified, not PEP, has no listed review reasons, and the only evidence is a single high-risk flag with an unscored transaction and no hard signal, no further transactional review appears necessary. Because the transfer already settled, holding funds is not applicable. Recommend closing the alert; a person should confirm no additional non-evidenced context exists before final closure.

Recommendation

Confidence

0.58

Model

claude-sonnet-5

Drafted

2026-09-17 19:30Z

Rationale

Only one signal present: entity.high_risk (+20); no hard signal flagged.
Entity is VERIFIED, PEP no, review reasons none, last screened within recent period.
Transfer is already SETTLED; no return code; not eligible for hold/release action.
Score/band is unscored (skoor null, n=29), indicating insufficient data for a risk-scored determination beyond the single flag.
No prior dispositions exist to suggest a recurring or escalating pattern.
Evidence is limited to one transaction and one signal, which lowers confidence in a definitive close but does not indicate a need to hold or escalate.

Evidence

{
  "n": 29,
  "band": "unscored",
  "skoor": null,
  "signals": [
    {
      "code": "entity.high_risk",
      "detail": "entity marked high risk by screening",
      "weight": 20
    }
  ],
  "routeReason": "detector always reviewed"
}

Skoor signals

Signal	Weight	Hard	Detail
entity.high_risk	+20		entity marked high risk by screening

Decision

Dispositions

No disposition yet.

Actions

Freeze, request to program, and suspend need a second, distinct approver. Clear hold, cancel, and pause execute on the requester's approval. Executed through the bank's own API with the tenant's sandbox key; a dry run when there is none.

No actions requested.