Bromure

Secure, ephemeral computing in disposable Linux VMs on macOS.

→ Full details, screenshots, and downloads at bromure.io

---

This repo ships two sibling apps, both built on Apple's Virtualization.framework:

• Bromure — every browser session runs in a throwaway Linux VM. Close the window, the VM is destroyed.
• Bromure Agentic Coding — a sandboxed environment for AI coding agents (Claude Code, Codex), with a host-side MITM proxy that swaps fake credentials for real ones on the wire so secrets never enter the VM.

Build

./build.sh                 # browser app
./build.sh bromure-ac      # agentic-coding app
swift test                 # tests

Outputs land in .build/arm64-apple-macosx/release/.

Architecture

Three SPM targets:

Target	Path	Notes
bromure	Sources/Browser/	Browser app + SwiftUI + AppKit window management
bromure-ac	Sources/AgentCoding/	Agentic-coding app + MITM proxy + cloud-credential plumbing
SandboxEngine	Sources/SandboxEngine/	Shared VM lifecycle, image management, virtio bridges

Both apps pre-warm a pool of VMs in the background so new sessions open in under a second. Guest ↔ host communication runs over vsock (clipboard, file transfer, MITM proxy).

Requirements

• macOS 14 (Sonoma) or later
• Apple Silicon (M1 or newer) — Virtualization.framework only supports ARM64 guest VMs on Apple Silicon hosts.

Author

• Renaud Deraison (prompting)
• Claude + Opus 4.7 (implementation)