Context
Risk and compliance needed to spot suspicious activity across all products as it happened, and to change rules without a deploy.
What I did
As architect in a team of six:
- The core real-time rule engine: it consumes events from every money service and evaluates CEL rules over per-merchant features.
- A rule management UI, so risk and compliance teams author and test rules themselves.
- Deduplicated alerts fed into a third-party case management system for investigations.
- ETL pipelines that combine transaction data from multiple upstream sources.