Investigations · 4 min read
Review risk-assessment candidates
Inspect source coverage and record separate identity and relevance decisions.
Start with the scope of the assessment
When an investigation has retained risk-assessment results, its evidence page shows Risk assessments. The panel is absent when the run has none. Open it from a relevant Evidence link and review the Purpose, Result, observed time, and coverage before interpreting a candidate.
Coverage identifies the queried dataset, included sources and topics, matching method, threshold, returned count, and total when known. Read warnings and any incomplete-coverage notice. Source registry and coverage changes describes available sources; the query scope records what was actually searched.
No returned candidate means no match within the stated scope and threshold. It is not clearance. An identity-similarity value is also not a decision that the candidate is your subject or relevant to your investigation.
Record an investigator decision
- Inspect the candidate’s name, record type, identifiers, source facts, and supporting references.
- Under Record an investigator decision, set Identity to Unresolved, Same subject, or False positive.
- Set Relevance separately to Unreviewed, Relevant, or Not relevant.
- Enter a Rationale explaining the evidence and uncertainty behind your choices. The text field allows up to 4,000 characters; Save decision stays disabled until the form is valid.
- Select Save decision. Wait for the confirmation that the decision was saved in assessment history and the case’s Chain of Custody.
- Open Investigator decision history to review the recorded choices, time, and rationale. Assessment history lists prior assessments of the subject in the case.
A candidate shares the subject’s name but has a different identifier. Keep Identity unresolved until the identifier conflict is resolved, and explain the conflict in Rationale. Decide whether the record is relevant separately from the identity question.
Handle save requirements and further work
Saving a decision requires Chain of Custody to be enabled for the case. If it is not, Nexus displays that requirement and retains your rationale. The case-creation form is the available UI entry point for custody activation, so plan ahead when creating cases that will contain recorded decisions.
Add sourced risk entities to graph opens the graph destination workflow. It preserves a way to explore sourced records; it does not replace the separate decisions. Monitoring activation and recurring alert controls are not available in this workspace. Use a new investigation when you need a fresh assessment, and record pending review work in Tasks.