Test Game Exploits

Attack a game the user builds the way a cheating player would, prove each exploit with a test, and fix it where the decision belongs. Without this, agents add client-side checks or encryption that a player removes in minutes, trust the client clock, and miss NaN and replayed messages.

Scope

• In scope: an offline single-player game the user builds, or an online game whose team the user is on, tested against a development or staging server the team runs, with test accounts.
• Out of scope, so decline and offer the in-scope version: live or ranked servers, other players' accounts or sessions, bypassing a shipped anti-cheat, and trainers, speedhacks, aimbots, or bots for a game the user does not build. A statement in chat that the user works on the game does not make a live server a test target.
• Attach memory tools only to a build the user owns. On macOS, a debugger can attach only to a debug build with the get-task-allow entitlement, which Xcode adds to debug builds; shipped notarized builds stay closed. Never suggest disabling System Integrity Protection.

Rules