feat(sentinel): detect elytra anomalies #5

Merged
dmg merged 1 commits from ticket-348-alert-operators-to-implausible-elytra-propulsion-or-wear into main 2026-10-29 21:10:51 +00:00
Owner

Outcome

Adds explainable detection for source-less elytra propulsion and statistically implausible wear without treating high speed or one missed durability change as suspicious.

Behavior

  • correlates server-recognized gliding, equipped elytra identity, altitude, acceleration, rocket use, riptide, external velocity, explosions, and replacement
  • excludes descending/altitude-conversion flight and grants bounded correlation grace after observed propulsion sources
  • requires repeated source-less ascent or acceleration for ELYTRA_SOURCELESS_PROPULSION
  • requires at least 60 eligible wear opportunities, scaled by Unbreaking, for ELYTRA_IMPLAUSIBLE_WEAR
  • resets wear evidence for observed wear, Mending/XP repair, unbreakable items, swaps, replacement, or glide interruption
  • reports bounded named evidence without coordinates or inventory contents and never mutates flight, items, rockets, velocity, or events

Verification

  • meaningful RED SHA-256 d32db8d5f5c169bbd151b1708bdfa9d2d0a6e2172c30be16e3b5872c56d9c808
  • final clean suite: 108 JVM, 3 native Purpur 26.3, 73 release-tool tests; zero failures/errors/skips
  • production manifest SHA-256 04ce3f6ded623d6b65890be02733bd2d08852fa2575317d0dc7c29ac3c6767d3
  • test manifest SHA-256 801d53f667344c1d31df2810eed84cc01024b205f9ddcd1aed550c18901387d0
  • Semgrep: 65 rules over 33 production Java files, zero findings/errors; JSON SHA-256 20a2ca675e8b37c590341215866e1b8ebcb1617a3f1f2db801afa63f0a0a0e96
  • no dependency, workflow, GitOps, installation, or deployment changes

Kaneo: SM-348

## Outcome Adds explainable detection for source-less elytra propulsion and statistically implausible wear without treating high speed or one missed durability change as suspicious. ## Behavior - correlates server-recognized gliding, equipped elytra identity, altitude, acceleration, rocket use, riptide, external velocity, explosions, and replacement - excludes descending/altitude-conversion flight and grants bounded correlation grace after observed propulsion sources - requires repeated source-less ascent or acceleration for `ELYTRA_SOURCELESS_PROPULSION` - requires at least 60 eligible wear opportunities, scaled by Unbreaking, for `ELYTRA_IMPLAUSIBLE_WEAR` - resets wear evidence for observed wear, Mending/XP repair, unbreakable items, swaps, replacement, or glide interruption - reports bounded named evidence without coordinates or inventory contents and never mutates flight, items, rockets, velocity, or events ## Verification - meaningful RED SHA-256 `d32db8d5f5c169bbd151b1708bdfa9d2d0a6e2172c30be16e3b5872c56d9c808` - final clean suite: 108 JVM, 3 native Purpur 26.3, 73 release-tool tests; zero failures/errors/skips - production manifest SHA-256 `04ce3f6ded623d6b65890be02733bd2d08852fa2575317d0dc7c29ac3c6767d3` - test manifest SHA-256 `801d53f667344c1d31df2810eed84cc01024b205f9ddcd1aed550c18901387d0` - Semgrep: 65 rules over 33 production Java files, zero findings/errors; JSON SHA-256 `20a2ca675e8b37c590341215866e1b8ebcb1617a3f1f2db801afa63f0a0a0e96` - no dependency, workflow, GitOps, installation, or deployment changes Kaneo: SM-348
dmg added 1 commit 2026-10-29 21:09:16 +00:00
feat(sentinel): detect elytra anomalies
CI / build (push) Successful in 1m12s
CI / build (pull_request) Successful in 1m16s
28e72e7349
dmg merged commit e506cb79f0 into main 2026-10-29 21:10:51 +00:00
Sign in to join this conversation.
No Reviewers
No labels
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: dmg/purpur-sentinel#5