taler-docs

Documentation for GNU Taler components, APIs and protocols
Log | Files | Refs | README | LICENSE

commit 23d76b7c93c478a0958308967ffcf2801984e0bc
parent c983426fabe4049d84133f7e982d6e34c7e912e5
Author: Christian Grothoff <christian@grothoff.org>
Date:   Sun, 30 Mar 2025 10:06:17 +0200

review derived properties spec, add a few FIXMEs

Diffstat:
Mdeployments/tops.rst | 47++++++++++++++++++++++++++++++-----------------
1 file changed, 30 insertions(+), 17 deletions(-)

diff --git a/deployments/tops.rst b/deployments/tops.rst @@ -53,11 +53,11 @@ Establishing a Business Relationship 4. When all the required data has been provided, it is in any case checked manually by the AML officer. Finally, the AML officer must categorize - the customer to to derive a risk profile. Based on the risk profile, + the customer to to derive a risk profile. Based on the risk profile, risk-based rules are set for monitoring the business relationship. If the AML officer has concerns about the business, they - escalate the case to the management as to whether the - business relationship can be opened. + escalate the case to the management as to whether the + business relationship can be opened. The management can then make a final decision on acceptance or rejection. Monitoring a Business Relationship @@ -459,7 +459,7 @@ Initial collection of basic attributes about customer during onboarding. * ``LIFE_INSURANCE`` * **Label DE**: ... eine Lebensversicherung mit separater Konto-/Depotführung - (sog. Insurance Wrapper) + (sog. Insurance Wrapper) * ``OTHER`` @@ -760,7 +760,7 @@ to document the risk profile of a customer. Geschäftsbeziehung mit einem PEP wurde eingeholt am: * ``COUNTRY_RISK_NATIONALITY_TYPE`` - + * **Type:** Multi-choice * **Label DE:** LÄNDERRISIKO (Nationalität) * **Choices:** @@ -792,15 +792,15 @@ to document the risk profile of a customer. * ``LOW`` - * **Label DE:** Risiko 0 gemäss VQF-Länderliste (VQF Dok. Nr. 902.4.1) + * **Label DE:** Risiko 0 gemäss VQF-Länderliste (VQF Dok. Nr. 902.4.1) * ``MEDIUM`` - * **Label DE:** Risiko 1 gemäss VQF-Länderliste (VQF Dok. Nr. 902.4.1) + * **Label DE:** Risiko 1 gemäss VQF-Länderliste (VQF Dok. Nr. 902.4.1) * ``HIGH`` - * **Label DE:** Risiko 2 gemäss VQF-Länderliste (VQF Dok. Nr. 902.4.1) + * **Label DE:** Risiko 2 gemäss VQF-Länderliste (VQF Dok. Nr. 902.4.1) * ``COUNTRY_RISK_BUSINESS_TYPE`` @@ -823,15 +823,15 @@ to document the risk profile of a customer. * ``LOW`` - * **Label DE:** Risiko 0 gemäss VQF-Länderliste (VQF Dok. Nr. 902.4.1) + * **Label DE:** Risiko 0 gemäss VQF-Länderliste (VQF Dok. Nr. 902.4.1) * ``MEDIUM`` - * **Label DE:** Risiko 1 gemäss VQF-Länderliste (VQF Dok. Nr. 902.4.1) + * **Label DE:** Risiko 1 gemäss VQF-Länderliste (VQF Dok. Nr. 902.4.1) * ``HIGH`` - * **Label DE:** Risiko 2 gemäss VQF-Länderliste (VQF Dok. Nr. 902.4.1) + * **Label DE:** Risiko 2 gemäss VQF-Länderliste (VQF Dok. Nr. 902.4.1) * ``INDUSTRY_RISK_TYPE`` @@ -911,7 +911,7 @@ to document the risk profile of a customer. persönlich unbekannt und Geschäftsaufnahme unter Abwesenden (Korrespondenzbeziehung) sowie keine Einführung/Vermittlung des Kunden durch eine Vertrauensperson - + * ``RISK_RATIONALE`` * **Type:** Multi-line text @@ -1052,7 +1052,7 @@ vqf_902_5 * **Type**: Multi-line text * **Label DE**: Beziehung der Vertragspartei zu wirtschaftlich berechtigten Personen, Kontrollinhaber, Begünstigten, Bevollmächtigten und weiteren in die - Geschäftsbeziehung involvierten Personen + Geschäftsbeziehung involvierten Personen * ``BIZREL_THIRDPARTY_AMLA_FILES`` @@ -1574,7 +1574,7 @@ Events: vqf_902_4 ^^^^^^^^^ -properties: +Properties: .. code:: javascript @@ -1645,6 +1645,9 @@ Properties: } else if (INCRISK_RESULT == "NO_SUSPICION") { newProps.AML_INVESTIGATION_STATE = "INVESTIGATION_COMPLETED_WITHOUT_SUSPICION"; } else if (INCRISK_RESULT == "OTHER") { + // FIXME-#9677: would be nice if we instead could set the property to "undefined"/null + // and *force* the AML officer to manually set it. + // Alternatively, we should probably default to "INVESTIGATION_PENDING". -CG newProps.AML_INVESTIGATION_STATE = "INVESTIGATION_COMPLETED_WITHOUT_SUSPICION"; } else { not_reached(); @@ -1662,10 +1665,20 @@ Events: newProps.AML_INVESTIGATION_STATE == "INVESTIGATION_COMPLETED_WITHOUT_SUSPICION") { emit(INCR_INVESTIGATION_CONCLUDED); } - if (newProps.AML_INVESTIGATION_STATE == "REPORTED_SUSPICION_SUBSTANTIATED") + if (newProps.AML_INVESTIGATION_STATE == "REPORTED_SUSPICION_SUBSTANTIATED") { + // FIXME-#9676: if possible, we should force the AML officer to tick + // an extra check-box "I submitted this case to MROS". No need to + // actually do anything here server-side, it's more an explicit + // acknowledgement/reminder to make really sure this event is only + // emitted if the report was files. emit(MROS_REPORTED_SUSPICION_SUBSTANTIATED); } - if (newProps.AML_INVESTIGATION_STATE == "REPORTED_SUSPICION_SIMPLE") + if (newProps.AML_INVESTIGATION_STATE == "REPORTED_SUSPICION_SIMPLE") { + // FIXME-#9676: if possible, we should force the AML officer to tick + // an extra check-box "I submitted this case to MROS". No need to + // actually do anything here server-side, it's more an explicit + // acknowledgement/reminder to make really sure this event is only + // emitted if the report was files. emit(MROS_REPORTED_SUSPICION_SIMPLE); } } @@ -1753,7 +1766,7 @@ to answer with statistics derived via events: 5. Meldungen an die Meldestelle (MROS) - 5.1. Meldepflicht (Art. 9 Abs. 1 GwG) (nummerische Anzahl) + 5.1. Meldepflicht (Art. 9 Abs. 1 GwG) (nummerische Anzahl) 5.2. Melderecht (Art. 305ter Abs. 2 StGB) (nummerische Anzahl) 5.3. Total der an die Meldestelle (MROS) und den VQF erfolgten MROS-Meldungen