<aside> 🚨

Status: Planned / skeleton · All alerts & clients fictional · No real SARs

</aside>

Purpose

Transaction-monitoring and alert disposition alongside KYC/CDD onboarding.

Each fictional case follows: Alert → Investigation notes → Disposition (false positive / escalate / SAR-style training decision).

Main line: Regulatory requirement → Control measure → Case decision.

Scope (fictional only)

• Alert intake from simulated TM rules (velocity, structuring-like patterns, unusual counterparties, sanctions-screen refresh triggers — all invented).
• Investigation notes: what was checked, what was inconclusive, what control applied.
• Disposition: False positive · Escalate (internal) · SAR-style escalate (training label only; not a real filing).
• Link each completed memo into Case Index (Type = AML Alert).

Deliverables

• [ ] Alert disposition SOP (1–2 pages, public-framework based)
• [ ] Case templates (below) filled for 5–8 fictional alerts
• [ ] Control-gap notes (TM vs onboarding handoff)
• [ ] Index rows in Case Index for every completed memo

Case templates (empty — fill later)

Template ALERT-001

Template ALERT-002