What this protection is for
Sky focuses on executor/injection behavior instead of claiming that a specific executable name was detected. This makes the protection useful against multiple cheat/executor families.
Typical signals
- Honeypot event triggers that legitimate resources never call.
- Integrity/challenge protocol anomalies.
- Missing client heartbeat signals.
- Suspicious client resource restart loops.
- Entity, projectile, particle and damage abuse correlated with the player.
Safe actions
Keep experimental integrity or heartbeat rules on Log while testing. High-confidence honeypot abuse can use a stronger action after validation on your own server.