Governance
Detection rules, screening sources, access control and the activity log
| Rule | Name & condition | Alerts 90d | To case | Version | State |
|---|---|---|---|---|---|
| TBML-07 | Export value against declared capacity ratio(declared_value, capacity_12m) > 2.0 | 188 | 21 | v2026.06 | Proposal pending |
| TBML-11 | Duplicate bill of lading across destinations count(distinct destination per bol) > 1 | 64 | 18 | v2026.06 | Active |
| MULE-03 | Consolidation velocity below reporting threshold inbound_count > 100 AND consolidation_window < 1h | 241 | 34 | v2026.06 | Active |
| STR-22 | Repeated deposits near CTR threshold amount between 0.9× and 1.0× threshold, count ≥ 5 | 412 | 19 | v2026.04 | Under calibration |
| HUN-04 | Same-day settlement across exchange houses distinct_msb ≥ 3 within 24h | 96 | 11 | v2026.06 | Active |
| GEO-01 | Counterparty in monitored jurisdiction jurisdiction in monitored_list | 1,204 | 6 | v2026.06 | Under calibration |
| CSH-02 | Cash inconsistent with declared occupation deposits_12m > 20× declared_income | 188 | 9 | v2025.11 | Active |
| VA-01 | Virtual asset settlement of trade flows — proposed, not yet implemented | 0 | 0 | draft | Proposal pending |
TBML-07PROPOSAL PENDING
Raise capacity-ratio threshold 2.0× → 2.4×
Submitted by the detection team to reduce false positives on seasonal knitwear volume. Analysts cannot apply this change directly; it requires supervisory approval and takes effect only on a dated version.
Backtest, 180 days
Alerts that would not have fired
−31
False positives removed
27
Alerts that became cases, lost
4
Of those, disseminated
1 · prosecution
Four alerts that became cases would not have fired under the proposed threshold. One of those cases was disseminated and led to a prosecution.