VulpineOS

The first browser engine with AI agent security built into the C++ core.

VulpineOS is a hardened Firefox fork (based on Camoufox / Firefox 146.0.1) purpose-built for autonomous AI agents. It solves the three critical problems that make current browser-based agents fragile and exploitable.

The Problem

AI agents browsing the web face three unsolved challenges:

Prompt Injection — Malicious websites hide invisible text in the DOM that hijacks the agent’s instructions. Current agents have zero defense against this.
Page Mutation — The page changes between when the agent reads it and when it acts. JavaScript timers, animations, and network callbacks mutate the DOM mid-decision, causing the agent to click on elements that no longer exist or have moved.
Token Waste — Accessibility trees are bloated with structural noise. Agents burn 50-70% of their context window on wrapper divs, generic groups, and redundant whitespace that carry no semantic value.

The Solution

VulpineOS addresses each problem at the browser engine level — not with JavaScript hacks or post-processing, but with C++ patches to Firefox’s core:

Phase	Feature	Layer
1	Injection-Proof Filter	Accessibility tree pruning
2	Action Lock	C++ page freeze (nsDocShell)
3	Optimized DOM Export	Token-compressed snapshots
4	Trust Warming	Background profile warming

Quick Start


# Clone and build
git clone https://github.com/PopcornDev1/VulpineOS
cd VulpineOS
make fetch && make setup && make dir && make build
 
# Launch the TUI
./vulpineos

On first launch, the setup wizard walks you through selecting an AI provider and model. See Getting Started for full instructions.

Architecture

VulpineOS ships as a single Go binary (vulpineos) that manages the Firefox kernel, a context pool for 100+ concurrent agents, an identity vault, and OpenClaw agent orchestration — all communicating over the Juggler protocol via pipe FD 3/4.


┌─────────────────────────────────────────┐
│  Go TUI (Bubbletea)                     │
│  ┌──────────┬────────────┬───────────┐  │
│  │ System   │ Conversation│ Agent     │  │
│  │ + Agents │            │ Detail    │  │
│  └──────────┴────────────┴───────────┘  │
├─────────────────────────────────────────┤
│  Orchestrator · Pool · Vault · MCP      │
├─────────────────────────────────────────┤
│  Juggler Protocol (FD 3/4 pipe)         │
├─────────────────────────────────────────┤
│  Camoufox (Firefox 146.0.1)             │
│  C++ Patches: Action Lock, AX Filter    │
└─────────────────────────────────────────┘

Foxbridge — CDP Proxy

Foxbridge is a companion project that translates Chrome DevTools Protocol (CDP) to Firefox’s Juggler and WebDriver BiDi protocols. It lets any CDP tool — Puppeteer, OpenClaw, browser-use — control Camoufox as if it were Chrome.

When foxbridge is installed, VulpineOS launches it automatically and routes OpenClaw’s browser tools through Camoufox instead of Chrome.

Learn more →

Credits

VulpineOS is built on Camoufox , originally created by daijro and maintained by Clover Labs . The anti-detection fingerprinting, mouse trajectory algorithms, and Juggler automation layer all originate from that project.