Activity on an entity flagged by screening (PEP status potential).

What happened. Alert c57a9e80-6a67-4b03-b2f9-d3a073f598e9 fired on entity enti_sim_lant_866sn4vcjd (PERSON, 'Potential Pep 3') under the sanctions_or_pep detector due to a potential PEP match. The entity is linked to one settled ACH outgoing debit of $1,991.68 (acht_sim_lant_6rnw6vfte4l) dated 2026-09-02, to a first-time counterparty with unknown country. What the evidence shows. The alert score is 25, band clear, hard_signal false, with routing driven by a standing rule ('detector always reviewed') rather than an elevated score. The entity record shows verification VERIFIED, high_risk false, and review reasons none, with last screening on 2026-09-01, one day before the transfer. The transfer itself carries the same clear-band score (25) with two contributing signals: entity.pep_potential (+15) and counterparty.first_time (+10), neither individually or combined reaching a concerning threshold. The transfer settled with no return code. Program KRIs are mostly ok; pep_flagged_entities is at watch (1/33) and manual_review_aging_hours is in breach (1433.6 hrs, n=6), but these are program-level metrics not specific to this transfer or entity, and stale_screening_share is 0 (ok), indicating screening currency is not a program-wide problem. What was checked. Reviewed alert scoring and band, hard-signal flag, entity screening status and verification, review reasons field, transfer status and return code, counterparty first-time signal, program declared volume and rails, and relevant program KRIs (pep_flagged_entities, stale_screening_share, manual_review_aging_hours) for corroborating pattern signals. No prior dispositions exist for this alert. What is recommended. Close the alert. The entity is verified, has no open review reasons, was screened recently, and the only transfer tied to the alert is small relative to declared program volume, already settled, and scored clear band with no hard signal. The manual_review_aging_hours breach is a program-level operational metric and does not present entity- or transfer-specific evidence requiring a hold on this alert; it may warrant separate operational follow-up outside this disposition.

{
  "n": 637,
  "band": "clear",
  "skoor": 25,
  "signals": [
    {
      "code": "entity.pep_potential",
      "detail": "potential PEP match",
      "weight": 15
    }
  ],
  "routeReason": "detector always reviewed"
}