[flushit]

Cheat mitigation needs to be server-side. Anything coming from the client has to be fair game. No matter what you do, this is inevitable in the light of reverse engineering and AI progress.

Chess is already there. It's really easy to cheat. You can though analyze games after the fact and pretty reliably conclude whether somebody cheated. That's one example of server-side cheating mitigation. No matter what the client feeds you, cheaters are detected and eventually banned.