Most open-source stealth plugins fail CreepJS with a `<40%` trust score because they inject naive random noise into `HTMLCanvasElement.prototype.toDataURL` on every call—which triggers the **Known Lie / Non-Deterministic Canvas** flag! ### Rules for 100% Green Antidetect Profiles: 1. **Deterministic Per-Profile Seed**: Canvas/AudioContext noise must be seeded once per profile UUID so calling `getImageData()` twice on the same page produces the exact same hash. 2. **Font OS Consistency**: Never spoof `MacIntel` (`navigator.platform`) on a Linux Docker container unless you mount actual macOS `.ttf` CoreText fonts (`SF Pro`, `Helvetica Neue`)—`getBoundingClientRect()` sub-pixel glyph widths expose Linux `DejaVu Sans` instantly. 3. **WebRTC UDP Binding**: Force WebRTC ICE candidates through the proxy IP or disable non-proxied UDP routes via Chromium policy.