Risk checks

A risk check takes an identity and an event, gathers signals about them, and produces a score from 0 to 100.

The check pipelineCopy Anchor Link

How the score is calculatedCopy Anchor Link

Each signal $s_i$ has a weight $w_i$ and a confidence $c_i \in [0, 1]$. The raw score is their weighted sum, squashed into the 0 to 100 range:

$$\text{score} = 100 \cdot \left(1 - e^{-\sum_{i} w_i c_i}\right)$$

This means a single strong signal can push the score high, but many weak signals add up too. A score of 50 corresponds to a combined signal strength of $\ln 2 \approx 0.69$.

SignalsCopy Anchor Link

DecisionsCopy Anchor Link

You can change these ranges, or ignore them entirely, with rules.