Screen a wallet address or entity / alias name against the OFAC SDN list. Returns 503 if the list has never loaded (deny-on-error policy).