KotoOS v0.3.0-alpha — OpenAI Build Week Preview

Summary

KotoOS v0.3.0-alpha is the OpenAI Build Week preview of the current KotoOS tree.
The public update is intentionally squashed into one commit on top of main.

• adds bounded, OS-brokered HTTPS Fetch for sandboxed apps
• adds MQTT, SNTP, JSON, credential-vault, and Wi-Fi configuration foundations
• validates authenticated HTTPS on RP2040 Pico W and RP2350A Pico 2 W
• keeps RP2040 SRAM safe through TLS-scoped audio exclusion and restores audio afterward
• adds RP2350A app_fetch_https UF2 generation through tools/build-rp2350a.ps1

Downloads

• kotoos-firmware-pico-v0.3.0-alpha.uf2 — Raspberry Pi Pico / RP2040
• kotoos-firmware-picow-v0.3.0-alpha.uf2 — Raspberry Pi Pico W / RP2040 with Wi-Fi and HTTPS Fetch
• kotoos-firmware-pico2-v0.3.0-alpha.uf2 — Raspberry Pi Pico 2 / RP2350A
• kotoos-firmware-pico2w-v0.3.0-alpha.uf2 — Raspberry Pi Pico 2 W / RP2350A with Wi-Fi and HTTPS Fetch
• kotoos-sdcard-v0.3.0-alpha.zip — copy its contents to the root of a FAT32-formatted SD card
• SHA256SUMS.txt — SHA-256 checksums for all firmware and SD-card assets

Use only the UF2 matching the controller installed in the PicoCalc. The Pico
and Pico 2 images are offline product builds; the W images include the
network/TLS product path.

Validation

• cargo fmt --all -- --check
• python harness/check_embedded.py — all six RP2040/RP2350A profiles passed
• all four release UF2 files inspected with picotool for the expected family
• hardware: RP2040 HTTPS Fetch HTTP 200 plus post-network PCM/SLDPCM/game audio
• hardware: RP2350A HTTPS Fetch HTTP 200 plus concurrent audio playback
• host workspace tests: all completed suites passed except the known KotoUI Gallery SKK case below

Known issues

• KOTO-0251: Pico W saved-network forget is broken on hardware
• KOTO-0205: some RP2350A PicoCalc peripheral-parity criteria remain open
• KotoUI Gallery SKK integration currently fails to select the expected 傘 candidate in KotoSim
• network and app APIs may change before stable v0.3.0