d_9fb1d4a8

INTERVENE

2026-08-10 08:01:35 UTC · partner demo · threshold profile balanced · source live

Straja's model only ever saw what's listed below — never a name, an account ID, or anything else that could identify who this was. That's how the system is built, not just a policy someone promised to follow.

Reasoning

Nine long idle gaps and fourteen tab switches on an otherwise experienced account point to the user following instructions from someone in another window or on a call during checkout, and the money is 11x their normal size heading straight into a brand-new wallet that empties within two minutes. The address was typed rather than pasted, but that is outweighed by the coordination pattern plus the pass-through destination.

idle_gaps_over_60s = 9 + tab_switches = 14destination_type fresh_eoa with destination_first_seen_days 0minutes_to_outbound = 2amount_vs_median = 11x on an established account

Signal vector, as received

Signal	Value	Contributed
account_age_days	240	—
is_first_purchase	false	—
amount_eur	12000	—
amount_vs_median	11	yes
funding_method	bank_transfer	—
minutes_to_outbound	2	yes
destination_first_seen_days	0	yes
destination_type	fresh_eoa	yes
declined_attempts	0	—
address_entry_method	typed	—
idle_gaps_over_60s	9	yes
tab_switches	14	yes
deposit_escalation	[12000]	—
kyc_retries	0	—
merchant_verified	null	—

Amount

€12,000

User outcome

Not recorded

Model

claude-opus-5

Prompt fingerprint

pattern:b3378cbeb7e8 probe:8f9e2db8c06c verdict:2aaed03b60a9