Repository navigation
Releases
paradox v2.0.3
Paradox 2.0.3 — Endstone 0.11.15
Rebuilt for BDS 1.26.60.6 / protocol 2225 and the exact Endstone 0.11.15 SDK. Updated all inspected packet types to the 2225 schema and preserved decoder limits and unsupported-runtime safeguards. Both native CI builds/tests passed in run 41569229273. Both release binaries passed 17 disposable-server checks. The Linux release binary also passed a connected-client check and independent decoding of 84 actual native packet payloads. Windows connected-client, retail/full anti-cheat and network-impairment acceptance remain pending.
The Linux release retains its exact locally qualified binary; the Windows DLL comes from the successful CI run. Release-documentation changes preserve runtime sources. Exact hashes and scope are in native/validation-endstone-0.11.15.json and native/validation-windows-endstone-0.11.15.json. Preserve existing configuration and databases when replacing the plugin, then fully restart.
Target: Endstone 0.11.15 / API 0.11, BDS 1.26.60.6 (protocol 2225).
Release assets include SHA256SUMS.txt and release-provenance.json. This is a GitHub release; no production server was deployed or restarted.
endstone-paradox v2.0.2 — Endstone 0.11.14
endstone-paradox v2.0.2 updates version-specific SDK pins and native runtime guards for Endstone 0.11.14. BDS remains 1.26.52.3, runtime 26.52 and network protocol 2193. SDK commit: 03f4189b1535af0870861748fc569f6deac0ad65. Exact runtime and fingerprint checks remain enabled.
Linux native compilation and CTest passed. The disposable live server passed 18 checks for native startup, protocol/module status, web authentication and invalid input, command execution, SQLite persistence and clean shutdown. The protocol compiler/schema and hardening pins remain unchanged. Windows and connected-client acceptance were not run for this update.
Validated artifact identities and SHA-256 checksums are attached. GitHub CI results are separate from the executed local checks recorded here. Source commit: 44e5c2a229ff5f8502e634e0533276e416f3e5e2.
Paradox v2.0.1
Paradox 2.0.1 is the stable native C++ release for Endstone 0.11.11 and BDS 1.26.51.1 / protocol 2193, with Windows x86-64 and Linux x86-64 packages.
Upgrade from the 2.0.0 preview: connected-client testing exposed a command authorization bug. Endstone wraps command senders; the preview could mistake a wrapped player for the console. This release uses the supported asPlayer() / asConsole() accessors and denies unrecognized senders. Ordinary players cannot change enforcement settings, while explicitly authorized staff can. Player-only commands now work through the same wrapper.
- Initializes connection activity and detection grace periods before the join callback, preventing premature AFK notices and enforcement during spawn.
- Uses supported actor accessors for combat and knockback events, with null checks for absent damage sources.
- Retains the preview's C++ hooks, 54-module audit, SQLite migration backup, native forms and authenticated dashboard, based on upstream Visual1mpact Paradox through v6.9.1.
- Keeps movement/aim/pathing heuristics observational and suspends corroborated detection during lag, unloaded terrain and transitions. No automatic bans.
- Adds a reproducible two-client BDS acceptance harness with isolated latency, jitter, loss, outage and server-stall fixtures, plus gameplay and enforcement positive controls.
Validation: the local Windows/Linux native regressions pass, plus 17 BDS integration checks on each platform and all connected-client assertions (72 Linux, 66 Windows). The extra Linux assertions cover forced server-stall recovery. These scripted clients send real movement, commands, inventory, combat and form packets. Exact scope and machine-readable records are in native/VALIDATION.md. Scripted clients do not reproduce every retail controller, touch, vehicle or custom-item interaction, and no finite suite establishes zero false positives.
The supplied stripped Linux binary cannot yield full private DWARF ABI headers; this plugin uses Endstone's supported C++ ABI and existing server hooks. Grave protection, container inspection and hopper/piston coverage have documented API limits. Review native/MIGRATION.md and native/MODULE_AUDIT.md before deployment.
Migration: stop the server, back up plugins/paradox, remove/uninstall the old Paradox Python wheel, and install exactly one native binary. Keep the existing data folder. Do not run the Python and C++ versions together. BDS binaries are not included.
Final verification: main CI and tag CI passed on both platforms. Downloaded release binaries passed all 17 server integration checks per platform. Additional connected-client runs on GitHub-built binaries also passed (72 Linux / 66 Windows). The attached release-validation.json records exact binary hashes and build coverage. All five uploaded assets were downloaded again and checksum-verified before publication.
Documentation: installation, configuration, commands and permissions, all 54 modules, and validation details.
Paradox v2.0.0 (superseded preview)
Superseded by v2.0.1. Do not deploy this preview: connected-client testing found a command-sender permission bypass and premature AFK initialization. Both are fixed in v2.0.1.
Paradox 2.0.0 is the first native C++ preview for Endstone 0.11.11 and BDS 1.26.51.1 / protocol 2193, with Windows x86-64 and Linux x86-64 packages.
- Replaces the Python plugin runtime with C++ event/packet hooks, SQLite persistence, native forms and an authenticated dashboard.
- Reviews upstream Visual1mpact Paradox through v6.9.1 and adds the native equivalents/adaptations documented in the module audit.
- Removes robotic-pathing punishment and combined heuristic escalation. Lag, jitter, server stalls, packet bursts, unloaded terrain and movement transitions reset evidence. No automatic bans.
- Preserves the client-clock baseline through recovery so a slowly draining input backlog cannot become fresh timer evidence while the client is still catching up.
- Accepts legitimate large subchunk requests and uses pinned, bounded protocol decoders checked against an actual dump of the supplied BDS build.
- Preserves existing data with a consistent SQLite migration backup; archives the old Python implementation separately.
Validation: Windows/Linux native builds and core regressions pass, plus 17 integration checks per platform against the supplied servers. Tests cover lag recovery, straight-line movement, hotbar boundaries, an 8,192-offset chunk request, malformed input, database restart persistence and web authorization.
This is a pre-release pending multiplayer gameplay and packet-loss soak testing. It does not promise zero false positives. The supplied stripped Linux binary cannot yield full private DWARF ABI headers; the plugin uses Endstone's supported C++ ABI and existing server hooks. Grave protection, container inspection and hopper/piston coverage have documented API limits. Review native/MIGRATION.md, native/MODULE_AUDIT.md and native/VALIDATION.md before deployment.
Migration: stop the server, back up plugins/paradox, remove/uninstall the old Paradox Python wheel, and install exactly one native binary. Keep the existing data folder. Do not run the Python and C++ versions together. BDS binaries are not included.
v1.9.4
v1.9.3
v1.9.2
v1.9.1 - Parity Updates
Paradox AntiCheat 1.9.1 with new upstream v6.1.1 parity features, UI enhancements, and config fixes.
v1.9.0 - V6 Modules Port
Ported 7 new modules from Paradox V6 and added ChestFormAPI/Bedrock-protocol-packets integration.
v1.8.3 — Violation Descriptions
What's New
- Human-readable violation descriptions — Every violation now includes a plain-English desc explaining what triggered the detection (e.g. 'Hit entity from 6.23 blocks away (limit 3.5)', 'Clicking at 22 CPS (max 14 for windows)')
- Descriptions appear in staff alerts, /ac-watch live feed, /ac-case evidence output, and the Web UI violation detail pages
- Renamed detail → desc in bot_detection and session_fingerprint for consistency
- Updated README and documentation
Modules Updated (26)
fly, killaura, reach, scaffold, waterwalk, packet_monitor, blink, timer, noclip, xray, vision, wallhit, criticals, stephack, antikb, triggerbot, autoclicker, self_infliction, namespoof, gamemode, illegal_items, afk, skinguard, bot_detection, session_fingerprint