Alert · reviewed · open

The entity's first transfer, $1,684.85, above the program median, came 0.0 hours after verification.

Detector: rapid_onboarding
Severity: medium
Program: Lantern Lending (simulated)
Subject: transfer acht_sim_lant_u0v8hxocq2
Transfer: acht_sim_lant_u0v8hxocq2 · $1,684.85 · ach outgoing
Skoor at alert: 0 clear
Hard signal: no
Policy: policy-v1
Opened: 2026-09-17 19:30Z
Closed: —
Decision clock: none · due — no clock
Escalated: —

Draft narrative

What happened. A ach outgoing credit transfer of $1684.85 (acht_sim_lant_u0v8hxocq2) on program Lantern Lending (simulated) was flagged by detector rapid_onboarding: The entity's first transfer, $1,684.85, above the program median, came 0.0 hours after verification.. What the evidence shows. Transaction Risk Skoor 0 (band clear). Entity Alder Co 312: verification VERIFIED, PEP no, high risk no. What was checked. No program KRI snapshot was available. No prior dispositions on this entity or counterparty. What is recommended. Recommended: close. A person decides; this draft was assembled from the evidence without a model (model output did not match the schema).

Recommendation

Confidence

null (template, no model)

Model

none (template)

Drafted

2026-09-17 19:30Z

Rationale

Template draft: recommendation follows the band and the hard-signal rule only.

Evidence

{
  "n": 48,
  "band": "clear",
  "skoor": 0,
  "typology": "rapid_onboarding",
  "confidence": 0.32,
  "thresholds": {
    "hours": 24
  },
  "medianCents": "151960",
  "routeReason": "detector not auto-closable",
  "hoursSinceVerification": 0
}

Decision

Dispositions

No disposition yet.

Actions

Freeze, request to program, and suspend need a second, distinct approver. Clear hold, cancel, and pause execute on the requester's approval. Executed through the bank's own API with the tenant's sandbox key; a dry run when there is none.

No actions requested.