One suspicion.
Six steps. One confidential chain.
A colleague on the operations desk notices something odd. Follow that single suspicion from the Staff Hub through the Money Laundering Reporting Officer (MLRO) substrate — with three statutory SLA clocks armed at submission, tipping-off safeguards on every screen, and an aggregate-only line at the end for the board.
Intake — the colleague submits from the Staff Hub
Why this matters: Anyone in the firm can raise a suspicion — no seat, no licence cost. The Staff Hub is per-tenant branded, so it looks and feels like the firm's own channel, not a third-party form.
SLA armed — three statutory clocks start
Why this matters: The three JFSC clocks (acknowledge · initial FIU consideration · external report) arm the moment the row lands. Queue tiles count overdue items against these clocks — nothing to configure.
Acknowledge — the 24h leg closes automatically
"Thank you for raising this. It has been received and logged. Please do not discuss the substance with anyone else, including the subject or your line manager. The MLRO will handle any next steps."
Why this matters: The acknowledgement is a compliance obligation, not a courtesy. Copy is tipping-off safe by design — no confirmation of what happens next, no mention of the FIU.
Triage — MLRO promotes the SAR into a case
Rationale: pattern matches previously closed CASE-DEMO-002 (rounded-value structuring, unrelated corporate senders). MLRO reviews before accepting the tag.
Why this matters: Compass suggests a typology tag — the MLRO decides. The moment triage completes, the "initial FIU consideration overdue" tile drops this row: the decision has been made, on the record.
Decide — decision is hash-chained into the log
Trust filter — Would you sign this yourself? If not, hold.
Why this matters: Every MLRO decision writes an entry whose hash is derived from the previous entry. Nothing can be silently amended after the fact — the chain would break and the tampered link would be visible.
FIU marker + board — aggregate only, never PII
Why this matters: The board sees the shape of the risk — volumes, medians, throughput — never the names or the narrative. The FIU report existence is marked; the report content stays in the MLRO substrate.