Server-side fingerprinting of client mods that announce themselves, with allowlist/blocklist profiles, a LOG → WARN → KICK ladder, and rules players can read for themselves.