Observe Mode

Purpose

Observe mode is the rollout profile for proving that your network traffic is clean before enforcement is enabled. It should record incidents, staff alerts, and report metadata without making hard punishments.

Use it when installing on a new proxy, after changing proxy routing, after adding large plugins, or when a player reports a possible false positive.

When to use it

• First deployment on any production network.
• After adding voice, menu, cosmetics, TAB, queue, or custom brand plugins.
• When confirming whether an issue still appears without enforcement pressure.
• Before moving to balanced mode.

Review rules

Do not treat one observe incident as proof of abuse. Look for repeated incidents, matching timestamps, repeated packet families, and whether the same player can reproduce the issue during normal gameplay.

If the incident disappears in observe after a profile change, compare the before and after reports instead of guessing. Keep detector internals private; share summaries and reproduction context only.