OreGuard 1.0.0

First official release.

Anti-X-Ray

• Per-player chunk data rewriting: only ores "with all six faces enclosed by solid blocks" are hidden; blocks adjacent to air that the player could already see are sent as-is.
• Three modes: HIDE_ORES (default, replaced with stone) / FAKE_ORES (replaced with random ores) / HIDE_ALL (hide all solid blocks).
• Fake blocks are chosen by dimension and height (stone / deepslate / netherrack / end stone), determined jointly by coordinates and the world seed; resending the same chunk yields the same result.
• Automatic restoration when the player approaches: periodic restoration, plus "breaking one block immediately reveals the ores it was hiding" — mining feel matches vanilla.
• Unbreakable blocks such as bedrock are never disguised, avoiding unmineable ghost blocks.
• Creative / spectator mode and permission-level bypass, both configurable.
• The fake block pool is validated: air, non-occluding blocks, fluids, and blocks with block entities are automatically filtered out with a warning printed.

Mining Behavior Detection

• Sightless mining: raycasting along eye position and line of sight over roughly the most recent 1.2 seconds; only breaks that are genuinely unseeable are scored.
• Mining distance and per-tick break count checks.
• Chain mining and area tools are recognized and exempted: adjacent ore vein growth, and "within 3 blocks around the targeted block," are not scored.
• Suspicion score decays with a half-life and alerts administrators when it reaches a threshold; by default it only alerts — autoKickScore is off by default and no action is taken.

Administration

• /oreguard status | selftest | top | stats | reset
• selftest can run a real deception path on any chunk (console usable) and verify that "the data in the packet has indeed changed" and "the world has been restored."
• Config file changes are reloaded automatically; no server restart required.

Compatibility

• NeoForge 1.21.1 (declared dependency 21.1 and above, not pinned to a specific patch number)
• Server-side only: registers no blocks, items, network channels, or registry entries; vanilla clients can join directly.