# Clearcote

> Clearcote is an open-source, de-Googled Chromium build with engine-level fingerprint
> controls. It presents one coherent, plausible browser identity instead of an accidentally
> unique one, and is a drop-in for Playwright & Puppeteer. No opaque binaries — every change
> is a readable patch and every build is reproducible and signed.

Site: https://clearcotelabs.com
Repository: https://github.com/clearcotelabs/clearcote-browser
License: BSD-3-Clause
Status: pre-release (v0.1.0-pre), Chromium 149, Windows x64

## What it is
- An independent project. Not affiliated with Google, Chromium, or any commercial browser.
- Built on ungoogled-chromium (Google services/telemetry removed) + a transparent patch set.
- Identity controls are compiled into the C++ engine, not injected via JavaScript.
- Signals are derived per-site (farbling-style) so they stay coherent and decorrelated across domains.

## Use it (drop-in)
Point any Playwright/Puppeteer launcher at the binary and pass identity as command-line args:

    from playwright.sync_api import sync_playwright
    with sync_playwright() as p:
        b = p.chromium.launch(
            executable_path=r"C:\clearcote\chrome.exe",
            args=["--fingerprint=seed-123", "--fingerprint-platform=windows"],
        )
        b.new_page().goto("https://example.com")

## Key flags
- --fingerprint=<seed>                  master seed (int/str); same seed => same identity
- --fingerprint-platform=windows|linux|macos
- --fingerprint-brand=Chrome|Edge|Opera|Vivaldi
- --fingerprint-gpu-vendor / --fingerprint-gpu-renderer
- --fingerprint-hardware-concurrency=<n>
- --fingerprint-location=<lat,lng>
- --timezone=<IANA>                     e.g. America/New_York

## Roadmap (https://clearcotelabs.com/roadmap)
Built in the open; no promised dates — milestones ship when verifiable. Status as of v0.1.0-pre:
- Phase 0 — Foundations: SHIPPED. Scope/architecture, ungoogled-chromium pinned base, reproducible source-prep pipeline, automated build from source, published human-readable patch set.
- Phase 1 — First public build: SHIPPED. Windows x64 build, SHA-256 checksummed + GPG-signed release artifacts, reproducible build instructions, one-command source bootstrap.
- Phase 2 — Coherent identity controls: IN PROGRESS. Per-profile deterministic seed, engine controls (canvas/WebGL/audio/fonts/timezone/navigator/hardware), per-site farbling coherence — all shipped. Remaining: coherent WebRTC proxy-IP reporting, documented privacy defaults.
- Phase 3 — Automation SDK: SDKs SHIPPED. Python + Node SDKs (clearcote on PyPI + npm), Playwright-first, with verified auto-download; launch() returns a standard Playwright object. Remaining: recipes (profiles/proxy/headless).
- Phase 4 — Trust & supply-chain: IN PROGRESS. GPG-signed + SHA-256 checksummed releases shipped. Remaining: build provenance/attestation (Sigstore-style), open CI.
- Phase 5 — Beyond: PLANNED. Linux/macOS, self-hostable profile manager, automation/agent integrations, research-driven hardening.

## Docs
- Roadmap:             https://clearcotelabs.com/roadmap
- Introduction:        https://clearcotelabs.com/docs
- Installation:        https://clearcotelabs.com/docs/installation
- Playwright/Puppeteer:https://clearcotelabs.com/docs/playwright
- Fingerprint flags:   https://clearcotelabs.com/docs/fingerprint
- Architecture:        https://clearcotelabs.com/docs/architecture
- Verification:        https://clearcotelabs.com/docs/verification
- Build from source:   https://clearcotelabs.com/docs/building
- For agents & LLMs:   https://clearcotelabs.com/docs/agents

## Responsible use
Intended for privacy, testing, research and lawful automation you are authorized to run.
It is not marketed against, and does not target, any specific detection product, and is not
a guarantee of evading any system. You are responsible for how you use it.