Hardware FixRecommendedDevice not working? Your driver may be the problemCheck updates for common hardware issues.Fix DriversHalloween DealsAmazon USHalloween week deals: useful picks before month-endAmazon US: current deals, useful picks and tech finds.Check DealsClean PCRecommendedOne scan can reveal what keeps slowing WindowsLook for cleanup and repair opportunities.Run Scan×
FREEDOM251

Freedom251 › Blog › agentic AI

The Graph Gathers, the Rules Decide, the Model Explains: Building an Agentic Fraud Investigator on TigerGraph

By Freedom251 Team · · 6 min read

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

An agent built this way investigates an alert by querying a graph of customers, cards, transactions and devices, pulling in model and rule signals, and retrieving closed cases and policy text. A deterministic policy layer then chooses the bounded recommendation, and a language model writes the narrative from those structured facts. The architecture is easy to inspect. Whether its conclusions are right is a separate question, and an independent synthetic-data study of a similar layered pipeline found its bounded agent less accurate than a simple threshold on the classifier beneath it.

The implementation discussed here is FraudGraph Agent, a challenge project published as a repository for a TigerGraph x Hacker House Goa challenge. It is a working design to study, not evidence that a bank has deployed or validated it. The sections below separate what the project does, what the evidence shows, and what you would need to measure before trusting this kind of agent with real cases.

As an Amazon Associate I earn from qualifying purchases.

How the investigation runs

The repository describes a nine-step loop. Each step passes structured results forward, and the language model writes text only at the end.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
  1. Start from an alert. The case begins with a flagged alert rather than an open-ended search.
  2. Query the graph. The agent runs GSQL queries against TigerGraph to pull the transactions, accounts and attributes connected to the alerted entity.
  3. Collect model and rule signals. It gathers episode-model output and rule-detector results.
  4. Retrieve precedent and policy. TigerGraph vector search returns closed cases and policy or typology passages that resemble the current case.
  5. Assess probability and pattern. The agent estimates fraud probability and the pattern the evidence fits.
  6. Recommend an action by policy. Deterministic policy rules map the assessment to a bounded recommendation and an approval route.
  7. Gather more evidence if needed. When the first pass is not enough, the agent runs further queries before the recommendation stands.
  8. Write the narrative. The language model produces a case summary or a suspicious activity report (SAR) narrative from the structured facts.
  9. Store case memory. The case is written back to the graph as case memory, represented in the repository by an AgentCase entity.

The graph schema: three kinds of entity

The repository names entities that fall into three groups, each doing a different job.

Group Entities named in the repository Role in the investigation
Relationship evidence Customer, Card, Transaction, DeviceProfile, EmailDomain, BillingRegion Connects accounts and transactions through shared attributes such as devices, email domains and regions. This is where a graph can expose links that a transaction-by-transaction view tends to miss.
Institutional knowledge ClosedCase, PolicyChunk Holds past case records and policy or typology text, retrieved with TigerGraph vector search.
Case memory AgentCase Records the agent’s own investigation so the graph keeps a trail of what was concluded.

Where each component’s authority ends

The design’s central idea is that no single component both finds the evidence and decides the outcome. The table gives each layer a contribution and a limit.

Layer What it contributes What it should not do Human check
GSQL graph queries Connected evidence around the alert Establish by itself that a link reflects fraud Confirm that a shared device or email reflects real behavior and not a data-join artifact
Model and rule detectors Episode-model and rule signals, fraud probability and pattern Be treated as validated because the signals are present Check the signals against outcomes from a later period
Vector retrieval Similar closed cases and policy or typology passages Stand in for the current policy text Confirm that retrieved precedents are relevant and that the policy version is current
Deterministic policy rules Bounded recommendation and approval route Be overridden or reworded by the language model Review each rule change as a controlled change
LLM narrative Readable summary or SAR narrative built from structured facts Introduce facts absent from the structured record Verify each factual sentence against the evidence it describes

Running the project: what the repository specifies

Because this is a challenge project, its setup is a starting point rather than a production runbook. The repository specifies:

  • TigerGraph 4.2.5 Community Edition, run in Docker.
  • TigerGraph MCP access to installed queries and graph operations, so the agent can call queries already installed on the database.
  • A fallback to a direct pyTigerGraph client.

These details come from the repository itself and have not been independently verified for currency. Check the version against TigerGraph’s current release information before you copy the setup. TigerGraph is also the vendor whose guidance is cited below, so read its material as vendor-authored.

What’s actually slowing this PC down?

Pick the symptom - the matching free tool is one click away.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

What the independent evaluation found

In July 2026, Rahil Sharma published Toward Auditable Fraud Detection: Combining Graph Features, Model Explanations, and Agentic Case Investigation. The paper tests a layered pipeline on PaySim, a synthetic mobile-money dataset, and on a separate controlled synthetic-ring experiment. It is an independent study of its own pipeline, so its results are not measurements of the FraudGraph Agent repository.

Graph features on PaySim

On the full PaySim test set, graph and anomaly features did not improve Average Precision over the paper’s corrected tabular baseline. They did help rank fraud within an intermediate-score subset. The benefit was confined to that slice of scores rather than spread across the whole test set.

A controlled ring experiment

In the paper’s controlled experiment with injected multi-account rings, engineered structural features recovered all injected test transactions, while the tabular baseline missed roughly a quarter of them. This is the paper’s clearest evidence for graph structure. Because the rings were planted in the data, however, it shows that the features detect structure that was deliberately inserted. It does not show how they perform on rings in live traffic.

Rank #3
Graphic Image Sports Illustrated Tiger Woods 25 Year Special Edition Leather Book
  • Commemorate Tiger Woods' 25-year journey with a billiant, fully illustrated table book from Sports Illustrated
  • Sturdy build and construction. The hand bounded green leather hardcover gives it the perfect vintage look and durability
  • Its polished aesthetic perfectly aligns with the golf theme of this book, lending an elegant touch to your bookshelf or coffee table.
  • 232 pages full of iconic vibrant photos and some of the best written coverage of Woods’s career
  • Beautiful Stories, a good read, and great photographies, the ideal gift book for any Tiger fan

The bounded agent against direct thresholding

The paper also evaluates its bounded investigation agent on a balanced 60-case sample and compares it with direct thresholding of the classifier. The sample is small and synthetic.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
Decision method Accuracy Evaluation set
Bounded investigation agent 65.0% Balanced 60-case synthetic sample, reported in the paper (Rahil Sharma, 2026)
Direct thresholding of the classifier 71.7% Same sample, reported in the paper (Rahil Sharma, 2026)

On this sample, adding the agent lowered accuracy by 6.7 percentage points. The paper calls for real transaction data and temporal evaluation before any stronger claim can be made.

The exploratory escalation rule

The paper also describes a disagreement-based escalation rule. In its sample, the rule flagged two of the agent’s errors without flagging any correct decision. The author states that the rule must be validated on data separate from the data used to design it. Treat it as a hypothesis about escalation design, not as a proven safeguard.

An explanation is not a certificate

The paper’s central caution concerns the agent’s written rationales. Of the eight cases where the agent’s decision disagreed with the classifier, six turned a correct classifier result into an error, even though the agent supplied coherent written rationales. Sharma puts the point directly: “A reviewable rationale does not certify a correct decision.”

For a fraud team, an explanation is useful for audit: it shows what a reviewer should inspect. It cannot substitute for outcome testing that shows which decisions held up.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Support on Ko-Fi

What vendor material adds

TigerGraph’s agentic-RAG article argues that graph retrieval lets an agent follow connected relationships among accounts, transactions and behaviors during an investigation. That explains why a graph may suit inquiries that span several entities. It is architectural guidance from the vendor, not an independent test of this repository, and it does not show that graph retrieval prevents hallucination.

TigerGraph’s webinar page also advertises savings, return-on-investment and case-resolution figures. The material reviewed did not include the study design or the year those figures refer to, so this article does not rely on them.

Evaluating before any live case

The project’s model metrics and dataset counts are project-reported and have not been verified externally. Before any version of this architecture touches live cases, measure it on realistic, time-separated transaction data. The axes below are proposed evaluation criteria, not results established by these sources. If you compare the agent with an alternative such as a classifier behind a fixed rules layer with no agent, apply the same axes to both on the same data.

  • Decision quality, measured against the classifier alone under the same thresholds.
  • False-positive burden on the analyst queue.
  • Investigator workload per case, including time spent verifying narrative claims.
  • Latency from alert to recommendation.
  • Policy compliance: whether recommendations stay inside the rule set.
  • Auditability: whether each recommendation traces to the specific query results, precedents and rules behind it.
  • Human escalation performance: whether escalated cases are the ones the agent would otherwise have gotten wrong.

Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

agentic AIexplainable AIFraud Detectionfraud investigationgraph databaseGraphRAGLLMTigerGraph

Leave a Reply

Your email address will not be published. Required fields are marked *

Free tools Windows power users keep installed

One-click scans. No signup required.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Recommended PC Tool
Recommended PC Tool
Outdated Drivers Are Slowing You DownFree scan - exact matches
Windows Errors? Fix Them Before They SpreadFree repair scan

Two free Windows tools

One Free Minute Could Fix That PC

Before you go - each of these free tools takes about a minute and tackles what quietly slows a Windows PC down.

Special offer. View Outbyte info, uninstall instructions, EULA, and Privacy Policy.