Alert · reviewed · open

Activity on an entity flagged by screening (PEP status potential).

Detector: sanctions_or_pep
Severity: high
Program: Meridian Remit (simulated)
Subject: entity enti_sim_meri_28dfpclz9pj
Transfer: acht_sim_meri_2y6uo028bw9 · $857.98 · ach outgoing
Skoor at alert: 15 clear
Hard signal: no
Policy: policy-v1
Opened: 2026-09-17 19:31Z
Closed: —
Decision clock: none · due — no clock
Escalated: —

Draft narrative

What happened. A sanctions/PEP detector fired on entity enti_sim_meri_28dfpclz9pj under program Meridian Remit after screening flagged a potential PEP match. The alert is tied to one settled outbound ACH credit of $857.98 dated 2026-09-04. What the evidence shows. The transfer-level skoor is 15, band clear, with hard_signal false, driven by a single signal (entity.pep_potential, weight 15). The entity record shows verification status VERIFIED, high_risk false, review reasons none, and last screened 2026-08-22, which is within a normal screening cycle. The transfer itself settled with no return code and no other risk signals attached. Program KRIs show pep_flagged_entities at 1 of 30 (watch) and several unrelated breaches (reserve_coverage_ratio, manual_review_aging_hours, ach_unauthorized_return_rate, sanctioned_country_transfers), but none of these are linked in the evidence to this specific entity or transfer. What was checked. Detector output and score band, hard_signal flag, entity verification and PEP review reasons, transfer status and return code, counterparty country (unknown, not flagged), and program-level KRIs for any entity-specific linkage. No prior dispositions exist for this alert. What is recommended. Close the alert. The entity is verified, carries no confirmed PEP designation or adverse review reasons, screening is current, and the associated transfer settled cleanly with no return or hard signal. The program-level KRI breaches are noted for context but do not attach to this entity or transfer in the evidence provided and should be tracked separately at the program level rather than through this alert.

Recommendation

Confidence

0.72

Model

claude-sonnet-5

Drafted

2026-09-17 19:32Z

Rationale

Skoor 15 in clear band with hard_signal false indicates low computed risk for this transfer.
Entity verification is VERIFIED, high_risk is false, and review reasons are none, with screening current as of 2026-08-22.
Transfer acht_sim_meri_2y6uo028bw9 settled with no return code, indicating no execution-level problem.
Program KRI breaches (reserve_coverage_ratio, manual_review_aging_hours, ach_unauthorized_return_rate, sanctioned_country_transfers) are not tied in the evidence to this specific entity or transfer, so they support program-level monitoring rather than escalation of this alert.
No prior dispositions exist to suggest a repeat pattern for this entity.

Evidence

{
  "n": 867,
  "band": "clear",
  "skoor": 15,
  "signals": [
    {
      "code": "entity.pep_potential",
      "detail": "potential PEP match",
      "weight": 15
    }
  ],
  "routeReason": "detector always reviewed"
}

Skoor signals

Signal	Weight	Hard	Detail
entity.pep_potential	+15		potential PEP match

Decision

Dispositions

No disposition yet.

Actions

Freeze, request to program, and suspend need a second, distinct approver. Clear hold, cancel, and pause execute on the requester's approval. Executed through the bank's own API with the tenant's sandbox key; a dry run when there is none.

No actions requested.