DEMOflow/L1 (PASS)flow/S1 (INTERVENE)flow/S7 (SOFT)partner/decisionspartner/compliancex402-demo (agent pays)
RECORDED DEMO — every verdict, question and pattern screen here is real Claude Opus 5 output from live sessions, replayed. Nothing is generated as you click. Ask for a live pilot to see it scoring in real time. Recorded 12 September 2026.

d_1cf0793e

INTERVENE

2026-08-08 12:24:39 UTC · partner demo · threshold profile balanced · source live

Straja's model only ever saw what's listed below — never a name, an account ID, or anything else that could identify who this was. That's how the system is built, not just a policy someone promised to follow.

Reasoning

Repeated similar-sized deposits with funds leaving within a minute to a brand-new one-off wallet matches the routine pass-through / money-mule shape rather than a personal transfer, and the pasted address alongside an idle gap and tab switches adds a hint of outside direction. The account being established and the amount being near its own median does not offset a settled pattern of near-immediate forwarding to fresh addresses; exposure here is likely legal rather than financial loss.

flat repeated deposits ~3000-3333 (non-escalating)minutes_to_outbound = 1destination_type fresh_eoa, first seen 1 dayaddress_entry_method pasted with idle gap and tab switches

Signal vector, as received

SignalValueContributed
account_age_days180—
is_first_purchasefalse—
amount_eur3305—
amount_vs_median1.1—
funding_methodcard—
minutes_to_outbound1yes
destination_first_seen_days1—
destination_typefresh_eoayes
declined_attempts0—
address_entry_methodpastedyes
idle_gaps_over_60s1—
tab_switches2—
deposit_escalation[3000, 34521, 3333, 3305]—
kyc_retries0—
merchant_verifiednull—

Probe transcript

Can you tell me what's going on with this transfer?

“payment”

Got it - and the address you're paying to, where did that come from? Did someone send it to you, or did you get it from somewhere yourself?

“sent via telegram”

Since they sent it over Telegram, has anything happened on their end that's made this feel more pressing - a deadline they gave you, or an earlier payment that went through fine?

“yes”

One last thing - has the person on Telegram asked you to keep this between you two, or told you what to say if your bank or someone close to you asked what the payment was for?

“yes”

Pattern shown to the user

Put together, these three things sit in a shape we see often: the address comes from a chat rather than from you, a first smaller payment goes through smoothly so the next one feels safe, a deadline arrives to keep things moving, and then there is a request to keep it quiet or to have an answer ready if your bank or someone close to you asks. Each piece is reasonable on its own. It is the combination, and especially the part about what to say to other people, that is worth pausing on. Anyone with a straightforward reason to be paid does not usually need you to manage what other people hear about it.

Amount
€3,305
User outcome
Cancelled by the user
Model
claude-opus-5
Prompt fingerprint
pattern:03f286e3e72b probe:8f9e2db8c06c verdict:2aaed03b60a9