Large ACH then crypto withdrawal

Original English

If a user deposits $5,000 via ACH and attempts to withdraw it to an external crypto wallet within a 10-minute window, freeze the payout for manual review.

Compiled AST

{
  "name": "Large ACH then crypto withdrawal",
  "action": {
    "sink": "payout",
    "params": {
      "verb": "freeze_and_review",
      "reason": "ach_to_crypto_pattern"
    }
  },
  "stages": [
    {
      "id": "deposit",
      "type": "accumulator",
      "match": {
        "all": [
          {
            "eq": "deposit",
            "field": "direction"
          },
          {
            "eq": "ach",
            "field": "method"
          },
          {
            "gte": 500000,
            "field": "amount"
          }
        ]
      },
      "stream": "payments",
      "remember_for_seconds": 600
    },
    {
      "id": "withdrawal",
      "type": "trigger",
      "match": {
        "all": [
          {
            "eq": "withdrawal",
            "field": "direction"
          },
          {
            "eq": "external_crypto_wallet",
            "field": "destination_type"
          }
        ]
      },
      "stream": "payments",
      "requires_prior": "deposit"
    }
  ],
  "join_key": "user_id",
  "description": "If a user deposits $5,000 via ACH and attempts to withdraw it to an external crypto wallet within a 10-minute window, freeze the payout for manual review."
}