d_c2c17c67

INTERVENE

2026-08-10 08:00:51 UTC · partner demo · threshold profile balanced · source live

Straja's model only ever saw what's listed below — never a name, an account ID, or anything else that could identify who this was. That's how the system is built, not just a policy someone promised to follow.

Reasoning

The core real-time coaching pattern is present: repeated long idle gaps, frequent tab switching, and a pasted address, which together suggest someone is dictating instructions during checkout. It pairs with a brand-new one-off destination wallet, funds leaving within minutes, and an amount well above this account's usual size.

idle_gaps_over_60s + tab_switches + pasted addressfresh_eoa with destination_first_seen_days 1minutes_to_outbound 8amount_vs_median 4.5

Signal vector, as received

Signal	Value	Contributed
account_age_days	120	—
is_first_purchase	false	—
amount_eur	1500	—
amount_vs_median	4.5	yes
funding_method	card	—
minutes_to_outbound	8	yes
destination_first_seen_days	1	yes
destination_type	fresh_eoa	—
declined_attempts	0	—
address_entry_method	pasted	—
idle_gaps_over_60s	3	yes
tab_switches	4	yes
deposit_escalation	[1500]	—
kyc_retries	0	—
merchant_verified	null	—

Amount

€1,500

User outcome

Not recorded

Model

claude-opus-5

Prompt fingerprint

pattern:b3378cbeb7e8 probe:8f9e2db8c06c verdict:2aaed03b60a9