Minecraft anticheat guide

FastBreak Coverage Map: Which Break Check Answers What

Per FairPlay engineering notes, FastBreak coverage splits timing, reach, face, look, burst, and sequence questions. Here is how to read each break alert.

Short answer: what the FastBreak map covers

Per FairPlay engineering notes, FastBreak coverage is a set of checks, and each one answers one question about block breaking. Most read the start and finish dig packets with their timing and target data. One reads the server-confirmed break event for look direction. The checks keep state per player and reset it on teleport or quit. A match means one question failed, so read the check name before the player name.

Coverage by question

Use this table to turn a check name into the question it asks. The action column shows what the notes say the check does when it fires.

FastBreak questions, grouped by evidence
QuestionCoverage groupWhat the check does
Did the break finish faster than the block and tool allow?Timing and restartBuilds missing-time evidence with allowances for ping, tool switches, and block physics. May cancel the finish.
Did the player restart a dig faster than the last one allowed?RestartTracks repeated starts against the prior finish. May cancel the start packet.
Did too many distinct blocks complete in a short window?Burst and nukerCounts distinct completed targets in a rolling window and between client pong markers.
Did completed breaks exceed what one client epoch allows?Multi-break epochObserves completed targets per epoch and samples the excess once per epoch.
Was the block out of reach from the candidate positions?ReachBuffers distance beyond reach. May cancel the start or finish.
Was the clicked face one the player could not see?Clicked faceRecords a violation on impossible face geometry. Does not cancel.
Was the look direction wrong when the block broke?RotationNeeds several misses before it records a violation. Does not cancel.
Did the player hold one look across several targets?Static lookCompares the static look with target bearings. Visible head movement counts as exculpatory.
Did a finish target a block the start saw as air or fluid?Invalid targetBuffers the mismatch. Unknown packet state is ignored, not flagged.
Is the start-to-finish sequence legal after a cancel?SequenceKeeps same-block resume legal. Flags unmatched or repeated finishes.
Did the break happen without an arm swing?No-swingDisabled by default, per the notes.

Why one-tick mining is not an automatic violation

A start and a finish in the same server tick is a legal packet sequence, per the notes. The sequence check does not flag it for sharing a tick. The timing check still reads the block material and the dig session. It excludes instant-break blocks at or below its ignore threshold. An ordinary block must meet its calculated expected time plus allowances.

So the same-tick pattern is not automatically legal for every block, and it is not suspicious by packet ordering alone. Judge it by the block and the timing evidence.

Why burst checks do not use one break per pong

The notes reject one break per pong and one block per flying packet as models. The pong burst check sets its allowance from elapsed server ticks plus skipped markers, up to a maximum allowance. A delayed client that skips markers gets a larger allowance, not a flag for a fixed quota.

Clean intervals decay the buffer, so one busy interval does not carry forward. The multi-break check follows the same epoch idea for flying packets.

How to read a break alert

What is still unverified

Per the notes, Minecraft runtime verification is unexecuted and remains the server operator's job. The external overlap table matches check names across public anticheats. The notes say a name match is not semantic parity or runtime proof.

Read the map as a statement of code coverage. Before you rely on alert volume, test legitimate mining on a staging server at several tool and ping levels. Compare the defaults in the configuration reference with your own generated files, since an older install may keep older values.

FAQ

Does a one-tick break get flagged?

Not for sharing a tick alone. Per FairPlay engineering notes, a matched start and finish in one tick is a legal sequence. The timing check still evaluates the block, so an ordinary block finished too quickly can still produce a timing alert.

Does a rotation alert cancel the break?

No. Per the notes, the rotation check records a violation only and does not cancel a packet. It needs several misses before it records anything, and a valid look lowers its buffer.

Is the no-swing check active on my server?

The notes list it as disabled by default. Check your configuration before you count no-swing alerts, because a disabled check produces none.

What happens if a player switches tools mid-break?

The notes say each dig session keeps an immutable tool snapshot taken at start. Later held-item changes do not rewrite it. If the start tool is unresolved, tool-specific timing fails open instead of flagging.

Related sources and official pages

Browse all anticheat guides