Function recommend 

pub fn recommend(
    state: &DefenseState,
    transition: Option<&DefenseTransition>,
) -> DefenseResponse

Recommends a planner reaction from a single observation and an optional control-to-candidate transition.

The recommendation is a pure function of its inputs. When a transition shows the candidate was newly blocked while the control was not, the block is attributed to the candidate request and the response is Reconsider; a block present without that attribution is a standing Halt.