Alert · reviewed · open
The entity's first transfer, $1,905.19, above the program median, came 0.0 hours after verification.
- Detector
- rapid_onboarding
- Severity
- medium
- Program
- Lantern Lending (simulated)
- Subject
- transfer acht_sim_lant_36k6pkdmcmh
- Transfer
- acht_sim_lant_36k6pkdmcmh · $1,905.19 · ach outgoing
- Skoor at alert
- null unscored
- Hard signal
- no
- Policy
- policy-v1
- Opened
- 2026-09-17 19:30Z
- Closed
- —
- Decision clock
- none · due — no clock
- Escalated
- —
Draft narrative
What happened. An alert fired under the rapid_onboarding detector for entity Alder Co 30 (program Lantern Lending) after its first transfer, an ACH outgoing debit of $1,905.19, settled 0.0 hours after the entity's verification was completed. The transfer amount is above the program's median transfer size of $1,711.18.
What the evidence shows. The transfer acht_sim_lant_36k6pkdmcmh has settled with no return code, indicating no rejection or reversal. The entity is BUSINESS-type, verified, not flagged high risk, not PEP, with no review reasons on file, last screened 2026-06-27. The counterparty's country is unknown, but no other counterparty risk indicators are present. The transfer and entity skoor fields are both null with an unscored band and null confidence, and the sample size backing the model is small (n=17). The route reason given is 'detector not auto-closable,' meaning the system routed this for human review by policy rather than because of a specific risk finding.
What was checked. Verification status, PEP status, high-risk flag, review reasons, screening date, transfer status and return code, program declared volume against transfer size, and prior dispositions (none exist for this entity).
What is recommended. The transfer has already settled, so holding funds is not applicable and release does not apply since no hold is in place. The available evidence shows a verified, non-PEP, non-high-risk US business with a single settled transfer modestly above the program median and no return or reversal. There is no indication in the evidence of a pattern beyond this single alert. Recommend closing the alert, noting the model scoring fields are unscored/null so this closure rests on the verification and transaction facts rather than a model score.
- Recommendation
- close
- Confidence
- 0.62
- Model
- claude-sonnet-5
- Drafted
- 2026-09-17 19:30Z
- Rationale
- Transfer status is SETTLED with return code none, indicating no failure or reversal signal.
- Entity is VERIFIED, not high risk, not PEP, with no review reasons and a recent screening date.
- Transfer amount ($1,905.19) is only modestly above program median ($1,711.18), not an extreme outlier.
- Model scoring (skoor, band, confidence) is entirely null/unscored, which limits how much weight can be placed on the detector's severity label; this lowers confidence but does not itself indicate risk.
- No prior dispositions exist to suggest a recurring pattern for this entity.
- Route reason is procedural ('detector not auto-closable') rather than evidence of a specific finding.
Evidence
{
"n": 17,
"band": "unscored",
"skoor": null,
"typology": "rapid_onboarding",
"confidence": null,
"thresholds": {
"hours": 24
},
"medianCents": "171118",
"routeReason": "detector not auto-closable",
"hoursSinceVerification": 0
}
Decision
Sign in as an operator to decide. Operator sign-in →
Dispositions
No disposition yet.
Actions
Freeze, request to program, and suspend need a second, distinct approver. Clear hold, cancel, and pause execute on the requester's approval. Executed through the bank's own API with the tenant's sandbox key; a dry run when there is none.
No actions requested.