# R Anti-Cheat (RAC) — AI Assistant Context & Manifest

> R Anti-Cheat (RAC) is an enterprise-grade, server-authoritative exploit mitigation and live moderation engine engineered for Roblox experiences. Built in pure Luau with strict typechecking, 15 modular detection engines, an in-engine AI heuristics engine, a declarative Roact Bento-Grid admin panel, and cross-server MessagingService sync.

## Documentation Index

- [Introduction](/docs/getting-started/introduction): High-level overview, zero-trust server authority, and comparison with legacy anti-cheats.
- [Quick Start](/docs/getting-started/quick-start): 5-minute setup, folder placement, configuration, and testing.
- [Prerequisites](/docs/getting-started/prerequisites): Studio API access, DataStore permissions, and HttpService requirements.
- [Commercial Release Integration](/docs/installation/commercial-distribution): Step-by-step buyer guide for unzipping and integrating the commercial release package.
- [Roblox Studio Setup](/docs/installation/studio-setup): Direct installation within Roblox Studio.
- [Rojo Workflow](/docs/installation/rojo-workflow): Syncing RAC with Rojo and external IDEs.

### Architecture & Trust Model
- [System Architecture](/docs/architecture/core-overview): Server subsystems, Engine orchestrator, and component relationships.
- [Execution Lifecycle](/docs/architecture/execution-flow): Heartbeat scan loop, physical rollbacks, and heuristics pipeline.
- [Client-Server Trust Model](/docs/architecture/client-server-model): Zero-trust boundaries, untrusted client physics, and server validation.

### Configuration
- [Configuration Reference](/docs/configuration/config-reference): Full schema for General, AntiFalseDetection, Detectors, Risk, Punishments, and Admin settings.
- [Tuning Profiles](/docs/configuration/tuning-profiles): Recommended thresholds for FPS, Obby, RPG, and Vehicle games.

### 15 Detection Modules
- [Movement Detectors](/docs/detectors/movement): SpeedDetector (XZ plane), FlyDetector (downward raycast), TeleportDetector, NoclipDetector (geometry raycast), JumpDetector.
- [Combat Detectors](/docs/detectors/combat): ReachValidator (melee <= 18 studs), FireRateValidator (min interval 0.08s), WeaponDamageValidator (damage caps & LoS).
- [Player State Detectors](/docs/detectors/player-state): PropertyTamperDetector (WalkSpeed, MaxHealth), GodModeDetector (damage cancellation).
- [Network & Remotes](/docs/detectors/network): RemoteRateLimiter (token-bucket 35 req/s), RemotePayloadValidator (16KB cap, recursion depth 4).
- [Economy & Inventory](/docs/detectors/economy-instance): EconomyTransactionValidator (intervals & limits), ToolTamperDetector (backpack <= 50 tools).
- [Deceptive Honeypots](/docs/detectors/honeypot): Decoy remotes (ClaimFreeRobux, Admin_SetLevel) with instant 1.0 confidence bans.

### AI Heuristics & Anomaly Analysis
- [Heuristics Architecture](/docs/ai-agent/heuristics-engine): Multi-vector pattern correlation running in pure Luau (AIAgent.luau).
- [Exploit Fingerprints](/docs/ai-agent/fingerprint-catalog): Clustered signatures (Movement Manipulation, Kill-All/Silent Aim, Remote Flooding, State Tampering).
- [False-Positive Analysis](/docs/ai-agent/false-positive-analysis): 4 layers of defense, ping compensation (+12 studs/s per second RTT), and latency dampening.

### Admin Architecture & Custom GUIs
- [Admin Architecture](/docs/admin-panel/overview): Headless server-authoritative moderation architecture, client SDK, and custom UI design freedom.
- [Building Custom Admin GUIs](/docs/admin-panel/widgets): Step-by-step implementation for Native ScreenGui, Roact/Fusion, and Chat Commands.
- [Client API & Remotes](/docs/admin-panel/in-game-moderation): Complete ReplicatedStorage.RAC.ClientAPI reference, remote schemas, and event listeners.

### Punishments & RBAC
- [Enforcement Types](/docs/punishments/enforcement-types): Warnings, Kicks, Temp-Bans (24h default), and Perm-Bans.
- [Cross-Server Sync](/docs/punishments/cross-server-sync): Sub-50ms ban propagation via Roblox MessagingService topics.
- [Appeals & Revocations](/docs/punishments/appeals): Configuring Discord appeal URLs and unbanning players.
- [RBAC System](/docs/permissions/rbac-system): Server-enforced role hierarchy gating admin actions by Roblox UserId.
- [Roles & Levels](/docs/permissions/roles-and-levels): Viewer (1), Moderator (2), Admin (3), SuperAdmin (4), Owner (5).

### Integrations & Storage
- [Discord Webhook Integration](/docs/discord/webhook-integration): Asynchronous queue, rate limiting (1 req / 2s), and @everyone mention sanitization.
- [DataStore Storage](/docs/storage/datastore-integration): Schemas for bans, incidents, and audit logs with Studio in-memory fallback.

### Developer API Reference
- [Engine Server API](/docs/api-reference/engine-api): GetPlayerState, AddExemption, RemoveExemption, ValidateHit, ValidateTransaction, BanPlayer, UnbanPlayer.
- [Detection Engine API](/docs/api-reference/detection-engine-api): RegisterIncident, GetConsecutiveViolations, ClearPlayerCounters.
- [BindableFunction API](/docs/api-reference/bindable-functions): Decoupled communication via ServerScriptService.RAC_API.

### Complete Context
- For the full uncompressed corpus containing all documentation pages combined, refer to: `/llms-full.txt`