Unifin Market Surveillance: detectors, review and actions. Solution architecture Diagram

The surveillance pipeline

Core event collection without touching trading
Windows and order book snapshots for every alert
Dedup by event ID

Detectors and quality

18 rules with versions and thresholds
A 0..100 score and deadlines by severity
Calibration on 90 day replays

Review and actions

The alert case with evidence
Four eyes on decisions and actions
Cases with deadlines and a follow-up watch

Reporting and access

Reports with versions, snapshots and receipts
An append-only journal, kept for 5 years
Single sign-on, roles, multi-factor authentication

Event-driven and AI-native

Event bus: idempotency, outbox, DLQ
The AI agent service: analytical reports
An MCP server: tools and catalogues for agents