Alert · reviewed · open

The entity's first transfer, $635.76, above the program median, came 0.0 hours after verification.

Detector: rapid_onboarding
Severity: medium
Program: Harbor Marketplace Payouts (simulated)
Subject: transfer acht_sim_harb_9fkag5xg3yz
Transfer: acht_sim_harb_9fkag5xg3yz · $635.76 · ach outgoing
Skoor at alert: null unscored
Hard signal: no
Policy: policy-v1
Opened: 2026-09-17 19:30Z
Closed: —
Decision clock: none · due — no clock
Escalated: —

Draft narrative

What happened. The rapid_onboarding detector fired on the entity's first transfer, an outgoing ACH debit of $635.76 processed 0.0 hours after verification, which occurred against the program's 24-hour threshold. The transfer has already settled. What the evidence shows. The transfer amount ($635.76) exceeds the program median of $403.25. The transfer status is SETTLED with no return code, meaning the funds have already moved and there is nothing to hold. The transfer itself is unscored (band unscored, skoor null, n=0, confidence null), so no risk model output supports elevated concern. The entity, Birch Holdings 113, is VERIFIED, not flagged high risk, not PEP, has no review reasons on file, and was screened on 2026-06-29, prior to this transfer. There are no prior dispositions for this entity. What was checked. Reviewed the alert evidence block, the transfer record, the entity verification and screening status, and prior disposition history. Confirmed the transfer is settled rather than held, confirmed the entity has no other risk indicators (high risk, PEP, review reasons) attached, and confirmed the transfer scoring fields are null/unscored due to insufficient history (n=0). What is recommended. No funds are pending, so hold or release do not apply. The evidence consists of a single settled transfer from a verified, non-high-risk, non-PEP entity with no scoring signal and no prior alert history. Nothing in the record indicates a broader pattern or requires further review at this time. Recommend closing the alert.

Recommendation

Confidence

0.62

Model

claude-sonnet-5

Drafted

2026-09-17 19:30Z

Rationale

Transfer status is SETTLED with no return code; no funds are available to hold or release.
Entity is VERIFIED, not high risk, not PEP, with no review reasons and recent screening predating the transfer.
Transfer risk score is unscored (n=0, skoor null), providing no quantitative support for elevated risk.
No prior dispositions exist for this entity, so there is no pattern across alerts to escalate.
Evidence is limited to a single transfer meeting a timing/amount threshold rule; confidence is moderate given the thin, unscored dataset.

Evidence

{
  "n": 0,
  "band": "unscored",
  "skoor": null,
  "typology": "rapid_onboarding",
  "confidence": null,
  "thresholds": {
    "hours": 24
  },
  "medianCents": "40325",
  "routeReason": "detector not auto-closable",
  "hoursSinceVerification": 0
}

Decision

Dispositions

No disposition yet.

Actions

Freeze, request to program, and suspend need a second, distinct approver. Clear hold, cancel, and pause execute on the requester's approval. Executed through the bank's own API with the tenant's sandbox key; a dry run when there is none.

No actions requested.