Device & session intelligence¶

Tracks device fingerprint, IP, location, and session behaviour. Flags new device, impossible travel, and session anomalies.

Module dependencies¶

Module	Title	Required?	Contract	Reason
MOD-068	Authentication & session management	Required	—	Consumes session and device registration data from the authentication module to assess device trustworthiness.
MOD-104	AWS shared infrastructure bootstrap	Required	—	AWS shared infrastructure provisioned by MOD-104 (EventBridge buses, S3, KMS, Kinesis, Cognito) is required before this module can be deployed.
MOD-103	Neon database platform bootstrap	Required	—	Neon database and schema provisioned by MOD-103 must exist before this module can read or write Postgres.

Module	Title	As	Contract
MOD-023	Transaction fraud scorer	Optional enhancement	—
MOD-144	Confirmation of payee — account name verification	Hard dependency	—
MOD-145	Payment hold & friction engine	Hard dependency	—
MOD-154	Correspondent banking risk gate	Hard dependency	—

Policy	Title	Mode	How
DT-001	Information Security Policy	`GATE`	Unauthorised device access detected and challenged without human SOC involvement
PAY-005	Payment Fraud Prevention Policy	`ALERT`	Account takeover signals detected at device level before payment is attempted
AML-005	Transaction Monitoring Policy	`LOG`	Device anomalies logged as AML monitoring signals — feeds behavioural model

(No capabilities mapped)

Part of SD04 — Payments Processing Platform Compiled 2026-05-22 from source/entities/modules/MOD-024.yaml