Audit timeline

Investigation audit trail

Decision explanation

This transfer was paused because multiple independently supported signals formed a high-risk bank-impersonation pattern. No single signal caused the intervention.

1:14:47 AM

transaction_context_walker

Nodes visitedtransfer, recipient

Evidence$4,800, Added 8 minutes ago

FindingTransaction context signals created

StatusCREATED → Transaction context signals created

1:14:47 AM

relationship_walker

Nodes visitedrecipient

EvidenceNo recurring history

FindingRecipient relationship evaluated

StatusTransaction context signals created → Recipient relationship evaluated

1:14:47 AM

manipulation_walker

Nodes visitedcommunication

EvidencecontactedFirst, accountUnsafe, safeAccount, claimedBank, secrecy, urgency

FindingManipulation indicators evaluated

StatusRecipient relationship evaluated → Manipulation indicators evaluated

1:14:47 AM

pattern_match_walker

Nodes visitedcommunication, transfer

EvidenceCombined signal traversal

FindingPattern matching completed

StatusManipulation indicators evaluated → Pattern matching completed

1:14:47 AM

skeptic_walker

Nodes visitedrecipient, communication, transfer

EvidenceInnocent explanations searched

FindingSkeptic challenge recorded

StatusPattern matching completed → Skeptic challenge recorded

1:14:47 AM

safety_gate_walker

Nodes visitedpolicy, intervention

EvidenceRisk score 100

FindingPAUSE_AND_ESCALATE

StatusSkeptic challenge recorded → PAUSE_AND_ESCALATE

PolicyCritical risk cannot be automatically released

Mock JSON export

{
  "id": "demo-case",
  "riskScore": 100,
  "riskLevel": "Critical",
  "outcome": "PAUSE_AND_ESCALATE",
  "intervention": "PAUSED — POSSIBLE BANK IMPERSONATION",
  "walkers": [
    "transaction_context_walker",
    "relationship_walker",
    "manipulation_walker",
    "pattern_match_walker",
    "skeptic_walker",
    "safety_gate_walker"
  ]
}