Review identity and business action separately

Each candidate has an identity decision and a separate business decision. A same-identity finding does not require a particular business action in every source or jurisdiction. Conversely, an escalation is unresolved work: it remains open for an accountable reviewer instead of appearing completed.

A governed no-match automatically opens a case when policy or organization controls require external checks, business-action approval or event-triggered retention. An ad hoc no-match can also receive an optional due-diligence case. Complete required external checks and explicitly choose the business disposition before submitting it. Automated screening status, reviewer identity conclusions and business disposition remain separate in the retained record.

Organization and policy settings determine when a distinct eligible approver is required. The second reviewer cannot approve their own submission. Existing decisions are tied to the screening and current case revision; new evidence and monitoring changes require renewed review.

Correcting identity details creates a linked new screening and replacement case. The original case becomes superseded and remains available as history. Its decisions are preserved, and the replacement holds the active work. Reusable different-identity decisions are bound to the original evidence and are challenged when relevant facts change.

GET /api/v1/investigations/{id} accepts results:read and returns retained decisions, checks and history. Review mutations, comments, corrections, external checks, submission and approval require a permitted signed-in human session with an idempotency key and current expectedRevision and screeningId.

Assignment, priority and due dates help the team manage outstanding work. Current reports include old open and reopened cases even when their original creation date precedes the selected activity period. Acknowledging a monitoring notification does not resolve its investigation.