Activity on an entity flagged by screening (PEP status no, high risk).

What happened. Alert d44246a4-5d54-4d82-aecf-7c1bde438dc9 fired on entity enti_sim_harb_skonrvy3x6 (High Risk Trading 1) under the sanctions_or_pep detector, following an outgoing ACH debit of $470.64 (transfer acht_sim_harb_acdp689o8ki) settled on 2026-09-05. The detector routed for review because its routing rule always sends these to review, not because of an elevated score. What the evidence shows. The transfer and entity skoor is 20, banded clear, with no hard signal. The single contributing signal is entity.high_risk (weight 20), reflecting that screening marked the entity high risk. The entity record shows PEP status no, verification VERIFIED, no review reasons listed, and last screened 2026-08-27, which is within the program's normal screening cadence (stale_screening_share=0). The transfer itself settled with no return code, is within the program's declared monthly volume ($4,000,000.00 declared vs. $470.64 single transaction), and the program's sanctioned_country_transfers KRI is 0. Counterparty country is unknown but no sanctioned-country signal fired. What was checked. Reviewed the alert evidence, transfer record, entity record, and program KRIs. Confirmed no hard signal was present, no PEP flag, no unresolved review reasons, and no return code on the settled transfer. Checked program KRIs for related patterns: pep_flagged_entities (1, watch), high_risk_entity_share (0.067, watch), manual_review_aging_hours (breach), and ach_unauthorized_return_rate (breach) are elevated at the program level but are not tied to this entity or transfer by any evidence in this alert. Prior dispositions for this entity: none. What is recommended. Close this alert. The transfer has already settled, so no hold or release action applies. The evidence is limited to a single low-weight, clear-band signal (entity marked high risk) with no PEP, no stale screening, and no adverse transfer outcome. The program-level KRI breaches (manual_review_aging_hours, ach_unauthorized_return_rate) are noted for separate program-level review but do not by themselves connect to this entity or transaction in the evidence provided.

{
  "n": 1832,
  "band": "clear",
  "skoor": 20,
  "signals": [
    {
      "code": "entity.high_risk",
      "detail": "entity marked high risk by screening",
      "weight": 20
    }
  ],
  "routeReason": "detector always reviewed"
}