> ## Documentation Index
> Fetch the complete documentation index at: https://docs.tumban.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Recommendation values

> Allowed values for the recommendation field, with score thresholds.

The `recommendation` field on triage reports and webhook payloads
takes one of four values, mapped from the underlying `risk_score`:

| Score  | Recommendation  | When to act                                        |
| ------ | --------------- | -------------------------------------------------- |
| 0–10   | `no_flags`      | Auto-approve unless your policy requires sampling. |
| 11–40  | `review_low`    | Borderline. Inspect on capacity-permitting basis.  |
| 41–60  | `review_medium` | Likely violation. Send to review queue.            |
| 61–100 | `review_high`   | Strong signals. Priority review.                   |

These values are stable. The thresholds may be tuned over time; the
*values* will not change.

## Defaults on failure

When a scan fails (`status: "failed"`), the webhook payload defaults
`recommendation` to `review_high` and `risk_score` to `50` so the
profile always reaches your review queue. Use the `error` field to
distinguish "real" `review_high` from "could not analyze".

See [Recommendations and risk scoring](/concepts/recommendations) for
how the score is produced.