Abuse pattern triage

// Conceptual pseudocode — not Jev SDK syntax
const state = {
  "requests": "Sequential account IDs requested",
  "successful_auth": true,
  "normal_usage": "single account"
};

const decision = await evaluateDecision({
  state,
  question: "Which investigation path fits?",
  options: ["Enumeration review","Normal usage","Performance review"],
});

// Your adapter normalizes the provider response.
// Tune this example threshold on labelled data.
if (decision.outcome === "Enumeration review"
    && decision.probability >= 0.85) {
  queueAbuseInvestigation(decision);
} else {
  queueForReview(decision);
}