For Yandex Direct the important parts are yclid, ymclid and RU geo: live clicks come from yandex.ru, the ad check arrives separately. Handling example: Yandex Direct yclid.
14 checks and a verdict before the first offer byte, not after a redirect. That is how the Domovoy features are built: cheap rules first, expensive ones last, the pipeline stops on the first hit.
RedTrack cloaking usually sits inside the tracker, so bots still get counted. Here the filter runs before RedTrack via PHP or Worker and money goes to the tracking URL: [url=https://doma.gives/guides/redtrack-cloaking]RedTrack cloaking[/url].