KYC/AML combined risk score exposed on investor overview

[thlpkee20-wq]

Description

Compliance officers want a combined risk score merging KYC and AML signals into a single per-investor number. Compute deterministically from configurable weights and expose on the investor overview endpoint.

Requirements and context

• Must be secure, tested, and documented
• Should be efficient and easy to review
• Relevant code: src/aml/, src/routes/overview.ts
• Weights change requires dual-control audit

Suggested execution

• Fork the repo and create a branch
• git checkout -b feat/investor-combined-risk-score
• Implement changes
  • Add RiskScoreEngine service
  • Expose score on overview
  • Emit risk.score.recalculated audit
• Validate security and correctness assumptions

Test and commit

• Run tests
  • npm test
• Cover edge cases
  • Missing signal defaults to worst-case, never zero
• Include test output and notes

Example commit message

feat: combined KYC/AML risk score on investor overview

Guidelines

• Minimum 95 percent test coverage
• Clear documentation
• Timeframe: 96 hours