cannot find "Deciding when Traffic is Legitimate" and "Stabilizing a Policy"

I think you mean the Automatic Policy Builder configuration options. I've not got a v12 box to hand but in v11.5.x it's here:

Security - Application Security - Policy Building - Settings - Real Traffic Policy Builder [enable this] and click on Advanced options. The settings you are talking about are here.

Hope this helps,

N