d_1ae0cec6

INTERVENE

2026-08-09 11:59:57 UTC · partner demo · threshold profile balanced · source live

Straja's model only ever saw what's listed below — never a name, an account ID, or anything else that could identify who this was. That's how the system is built, not just a policy someone promised to follow.

Reasoning

The full real-time coaching triad is present — repeated long idle gaps, tab switching, and a pasted destination address — alongside a textbook bait escalation from 200 to 1000 to 4800 euros on a three-day-old account. Funds head straight to a brand-new one-off wallet within minutes, which fits an investment-scam shape rather than any self-directed purchase.

idle_gaps_over_60s + tab_switches + pasted addressdeposit_escalation [200, 1000, 4800]fresh_eoa destination_first_seen_days 2minutes_to_outbound 6 on a 3-day-old account

Signal vector, as received

Signal	Value	Contributed
account_age_days	3	—
is_first_purchase	true	—
amount_eur	4800	—
amount_vs_median	null	—
funding_method	card	—
minutes_to_outbound	6	yes
destination_first_seen_days	2	yes
destination_type	fresh_eoa	—
declined_attempts	0	—
address_entry_method	pasted	—
idle_gaps_over_60s	4	yes
tab_switches	3	yes
deposit_escalation	[200, 1000, 4800]	yes
kyc_retries	0	—
merchant_verified	null	—

Amount

€4,800

User outcome

Not recorded

Model

claude-opus-5

Prompt fingerprint

pattern:b3378cbeb7e8 probe:8f9e2db8c06c verdict:2aaed03b60a9