Device archetypes ensure platform, GPU, resolution, and UA all match (e.g. Linux profile gets Mesa renderers and X11 UA string). Spoofs navigator.userAgent, appVersion, and oscpu per container.
Automatic per-domain containers with hardened fingerprint spoofing: canvas, WebGL, audio, navigator, screen, timezone, WebRTC, fonts, ClientRects, plugins, battery, and connection APIs.