Decide a screening hit

Marks one hit of a screening as false_positive or confirmed, with a reason.

Decide once. The decision is kept by the hit's fingerprint (list entry, strength, listed name) and reused by the following screenings of the same subject that hit the same entry - when the subject is identifiable: a customer_id, or a person with date_of_birth. Without that (a person without date of birth, or an inline business), the decision applies to this screening only, because a bare name matches every homonym. A changed list entry starts open.

The screening you decide on keeps the suggested_decision it was created with; its matches[].status shows the decision. Your decision is the final one, on any hit, sanctions lists included. When OZAV compliance has also reviewed a hit, its decision shows until you decide. Screenings created before hit decisions existed return 422 HIT_NOT_DECIDABLE: screen the subject again and decide on the new screening. Sending the decision the hit already has (by you) returns 200 with the current state and records nothing new.