Financial crime alerting runs at a 95% false positive rate. Twenty years of failing to fix it taught banking things engineering teams keep rediscovering.