Alert · reviewed · open
Activity on an entity flagged by screening (PEP status potential).
- Detector
- sanctions_or_pep
- Severity
- high
- Program
- Meridian Remit (simulated)
- Subject
- entity enti_sim_meri_28dfpclz9pj
- Transfer
- acht_sim_meri_1bm3qjnxbhq · $435.04 · ach outgoing
- Skoor at alert
- 15 clear
- Hard signal
- no
- Policy
- policy-v1
- Opened
- 2026-09-17 19:31Z
- Closed
- —
- Decision clock
- none · due — no clock
- Escalated
- —
Draft narrative
What happened. Entity enti_sim_meri_28dfpclz9pj (person, "Potential Pep 2") was flagged by the sanctions_or_pep detector for a potential PEP match. The detector routed the alert to review because this detector type is always reviewed, not because of a score threshold. The alert ties to one ACH outgoing credit transfer of $435.04, settled, with no return code.
What the evidence shows. The entity record shows verification status VERIFIED, high_risk false, review reasons none, and last screened 2026-08-22, two days before the transfer. The transfer-level skoor is 15, band clear, with the only contributing signal being entity.pep_potential at weight 15; hard_signal is false. The transfer itself settled normally with no return code and counterparty country unknown. Program KRIs show pep_flagged_entities=1 of 30 (watch), which is consistent with this being the single flagged entity in the program, not evidence of a broader pattern. Other KRI breaches (reserve_coverage_ratio, manual_review_aging_hours, ach_unauthorized_return_rate) are program-wide metrics not specific to this entity or transfer.
What was checked. Reviewed the alert's skoor and band, the entity's verification and screening status, the transfer's settlement status and return code, and the program KRI panel for any PEP-related pattern beyond this single entity. No prior dispositions exist for this alert.
What is recommended. Close the alert. The entity is verified, not marked high risk, has no open review reasons, and was screened before the transfer date. The transfer settled without issue and the transfer-level score is in the clear band with no hard signal. Program-wide KRI breaches are unrelated to this specific entity or transfer and do not by themselves indicate a pattern tied to this alert.
- Recommendation
- close
- Confidence
- 0.72
- Model
- claude-sonnet-5
- Drafted
- 2026-09-17 19:31Z
- Rationale
- Entity is VERIFIED, high_risk false, review reasons none, screened 2026-08-22 before the 2026-08-24 transfer
- Transfer skoor is 15, band clear, hard_signal false, single contributing signal is the PEP potential flag itself
- Transfer acht_sim_meri_1bm3qjnxbhq settled with no return code, amount $435.04, no other adverse signals
- pep_flagged_entities KRI is 1 of 30 entities (watch, not breach), consistent with this being an isolated flag rather than a pattern
- Other KRI breaches (reserve_coverage_ratio, manual_review_aging_hours, ach_unauthorized_return_rate) are program-level and not linked in the evidence to this entity or transfer
- No prior dispositions exist to suggest recurring concern on this entity
Evidence
{
"n": 684,
"band": "clear",
"skoor": 15,
"signals": [
{
"code": "entity.pep_potential",
"detail": "potential PEP match",
"weight": 15
}
],
"routeReason": "detector always reviewed"
}
Skoor signals
| Signal | Weight | Hard | Detail |
|---|---|---|---|
| entity.pep_potential | +15 | potential PEP match |
Decision
Sign in as an operator to decide. Operator sign-in →
Dispositions
No disposition yet.
Actions
Freeze, request to program, and suspend need a second, distinct approver. Clear hold, cancel, and pause execute on the requester's approval. Executed through the bank's own API with the tenant's sandbox key; a dry run when there is none.
No actions requested.