Once you are an expert on what “normal” looks like, you will notice the different acts (scanning the environment and not displaying the cigarette) which will enable you to quickly transition to the next step in the OODA loop,“Orient”, as you’ve noted a potential threat.