Activity on an entity flagged by screening (PEP status no, high risk).

What happened. Alert b7340adb-7781-447c-a219-426269650e94 was raised by the sanctions_or_pep detector on entity enti_sim_nort_91eod4q93y within the Northwind Payroll program. The entity is flagged by screening as high risk. The triggering activity is one settled outgoing ACH credit transfer (acht_sim_nort_9scwbs721w2) for $2,139.19 dated 2026-08-09. What the evidence shows. The alert skoor is 20, band clear, with hard_signal false. The only contributing signal is entity.high_risk (+20); pep is no and review reasons are none. The transfer skoor is also 20, band clear, computed on n=656 with confidence 1. The transfer settled with no return code. Entity verification status is VERIFIED, last screened 2026-06-26, which is within the program's stale_screening_share=0 (n=33, ok), so screening is current. Program KRIs show pep_flagged_entities and high_risk_entity_share at watch level (1/33 and 6.06%), and manual_review_aging_hours in breach (1434.7 hours, n=6), but these are program-wide metrics not specific to this entity or transfer. No prior dispositions exist for this alert. What was checked. Reviewed the alert signals and score, the linked transfer status and return code, the entity's verification, PEP, and screening recency, and the program-level KRI panel for related risk indicators (sanctioned_country_transfers=0, ach_unauthorized_return_rate=0, verification_denial_rate=0.03, reserve_coverage_ratio=3.02). No sanctions hit, no PEP status, no adverse return code, and no stale screening were found. What is recommended. Close the alert. The evidence is limited to a single high-risk screening flag with a clear-band score and no hard signal, no PEP status, a settled transfer with no return code, and current screening. The manual_review_aging_hours breach and watch-level KRIs on pep_flagged_entities and high_risk_entity_share are program-level observations that a person may want to track separately but do not point to activity requiring hold or escalation on this specific alert.

{
  "n": 656,
  "band": "clear",
  "skoor": 20,
  "signals": [
    {
      "code": "entity.high_risk",
      "detail": "entity marked high risk by screening",
      "weight": 20
    }
  ],
  "routeReason": "detector always reviewed"
}