Firewall behaviour

// Conceptual pseudocode — not Jev SDK syntax
const state = {
  "connections": 147,
  "ports": 42,
  "window_seconds": 60
};

const decision = await evaluateDecision({
  state,
  question: "Should this traffic be blocked?",
  options: ["Block","Allow","Investigate"],
});

// Your adapter normalizes the provider response.
// Tune this example threshold on labelled data.
if (decision.outcome === "Block"
    && decision.probability >= 0.85) {
  blockTraffic(decision);
} else {
  queueForReview(decision);
}