Worked example

Permanent link /examples/fraud-hold-delayed-notice

Fraud hold with delayed notice

A delayed-notice fraud hold that keeps receipts and clocks enforceable.

Scenario

Investigation integrity with visible clocks

Delayed notice is allowed, but the hold still requires receipts, clocks, and remedies.

Receipt

Receipt emitted even with delayed notice

Receipts exist immediately, even if user notice is delayed for investigation.

{
  "schema_version": "1.0.0",
  "receipt_id": "RCP-2026-1284",
  "issued_at": "2026-06-04T12:09:55Z",
  "owner": { "name": "Fraud Operations", "role": "System owner" },
  "subject": { "id": "acct-55129", "type": "account" },
  "action": { "class": "WRITE", "description": "Place fraud hold", "reversible": true },
  "decision": { "decision_type": "fraud_hold", "reason_codes": ["VELOCITY", "DEVICE-MISMATCH"] },
  "clocks": { "ack": { "hours": 1 }, "review": { "hours": 12 }, "remedy": { "hours": 48 } },
  "notice": { "delayed": true, "delay_hours": 24 },
  "appeal_path": { "url": "/appeals/fraud-hold", "channel": "secure inbox" }
}

Clocks

Short clocks for fraud holds

Delayed notice cannot reset clock timelines.

Ack clock

1 hour

Owner acknowledges the hold and assigns a reviewer.

Review clock

12 hours

Human review confirms, narrows, or removes the hold.

Remedy clock

48 hours

Release the hold or provide a safe fallback with notice.

Exceptions

Delayed notice must be justified and bounded

Delays require explicit exception logging.

  • Delayed notice allowed only for active fraud investigation.
  • Maximum delay window is 24 hours before notice is required.
  • Exceptions logged in the Exceptions framework with steward review.

Remedy

Release or compensate quickly

Remedies must be visible immediately once notice is delivered.

  • Release the hold and restore access if fraud is not confirmed.
  • Provide limited-access alternatives if verification is needed.
  • Issue compensation for access loss tied to the decision log.

Bindings

Tie the hold to enforceable artifacts

Keep the flow auditable with bindings and evidence packs.