ML behavioural scoring model
|
|
| ID |
MOD-017 |
| System |
SD03 |
| Repo |
bank-aml |
| Build status |
Deployed |
| Deployed |
Yes |
| Last commit |
e16822cd5e8a9beb30a47b1e7eb148e911340f39 |
Snowflake Cortex model scores each customer's transaction against their own historical baseline and peer cohort. Anomalies generate risk score delta; high deltas queued for analyst review.
Module dependencies
Depends on
| Module |
Title |
Required? |
Contract |
Reason |
| MOD-042 |
CDC pipeline — Neon logical replication to S3 Iceberg |
Required |
— |
Snowflake Cortex model is trained and scored on transaction history delivered via the CDC pipeline. |
| MOD-039 |
Customer risk score model |
Optional |
— |
Customer risk score provides a baseline signal that improves the behavioural model's anomaly detection. |
| MOD-104 |
AWS shared infrastructure bootstrap |
Required |
— |
AWS shared infrastructure provisioned by MOD-104 (EventBridge buses, S3, KMS, Kinesis, Cognito) is required before this module can be deployed. |
| MOD-103 |
Neon database platform bootstrap |
Required |
— |
Neon database and schema provisioned by MOD-103 must exist before this module can read or write Postgres. |
| MOD-102 |
Snowflake account configuration & governance |
Required |
— |
Snowflake account locator, database names (BANK_{ENV}AML, BANK_RISK), warehouse names, and roles required for Dynamic Table creation and Cortex inference are provisioned by MOD-102 and read from SSM. |
Required by
| Module |
Title |
As |
Contract |
| MOD-018 |
Alert case management system |
Optional enhancement |
— |
Policies satisfied
| Policy |
Title |
Mode |
How |
| AML-005 |
Transaction Monitoring Policy |
AUTO |
Behavioural anomalies detected without requiring a specific rule — model adapts to new patterns |
| DT-005 |
Model Risk Management Policy |
LOG |
Model version controlled, validated, and logged — champion/challenger governance applied |
| AML-001 |
AML/CFT Programme Policy |
LOG |
ML model forms part of documented AML programme — supervisors can inspect model and outputs |
Capabilities satisfied
(No capabilities mapped)
Part of SD03 — AML Transaction Monitoring Platform
Compiled 2026-05-22 from source/entities/modules/MOD-017.yaml