False positives: review a suspicious ban in 60 seconds

A false-positive ban costs you a real player, and a cheater you unban costs you the trust of everyone else. Most suspicious bans can be settled in about a minute if you ask five questions in order. The first one that gives a clear answer ends the review.

The five questions

1. What fired, and on what?
   Open the ban. On Raven, the Config Option field names the detection and the rest of the details panel names the value that fired it. A ban with no details was filed by hand, so the question becomes which admin filed it and why.
2. Can that detection fire by accident?
   Some detections fire only on things normal play cannot produce, and a hit is almost always the player. Others can be set off by your own scripts, a weak machine or a bad connection, and for those the evidence decides. The Review a false ban page lists which detection is which.
3. What does the capture show?
   Open the screenshot or recording. A player flying, a menu on screen or a car that appeared from nothing settles it. A blank capture is not evidence either way.
4. Did more than one detection fire?
   Check the activity log for that player. Two different detections in the same session are unlikely to both be wrong. One detection on its own needs the evidence to carry it.
5. Who is the player?
   Look them up. Lookup shows every Raven server they played on, their trust score and any active bans. The trust score starts at 50, rises with play time and drops with bans, so it tells you about history and nothing about how they play. A new account banned in its first session is a different case from a player with a hundred clean hours.

When you confirm

Raven already keeps the detection, the value, the time and the capture on the ban. Add one line on why the evidence settles it. The admin who handles the appeal can then read your reasoning instead of repeating the review, and you have something to point to if the player takes it public.

When you lift a ban, fix the cause

Lifting the ban helps one player. The details panel almost always names something you can whitelist, such as the resource that spawned an entity or the event that was blocked, and whitelisting it stops the next player from being banned the same way. Whitelist the one thing you trust before you reach for a threshold, because a threshold change weakens the detection for everyone.

On Raven, the Raven Mind button beside Unban does both in one step. Either way the unban refunds the trust score the ban took and withdraws any automatic network ban that came from it.

Where Raven Mind saves the click

When three or more players are banned or kicked by the same detection for the same reason within three minutes, Raven Mind treats it as a false-positive wave. If the fix cannot open an exploit, it applies the fix and lifts every ban in the burst by itself. For a single ban, the ban stays and the suggested fix is waiting when you open it. How Raven Mind works covers the rest.