diff --git a/.config b/.config
index 4ae5848..f00c34d 100644
--- a/.config
+++ b/.config
@@ -1,6 +1,6 @@
 #
 # Automatically generated file; DO NOT EDIT.
-# Buildroot -gbd62aab-dirty Configuration
+# Buildroot -ga582ea3 Configuration
 #
 BR2_HAVE_DOT_CONFIG=y
 BR2_HOST_GCC_AT_LEAST_4_9=y
@@ -524,6 +524,7 @@ BR2_LINUX_KERNEL_INSTALL_TARGET=y
 # Linux Kernel Extensions
 #
 # BR2_LINUX_KERNEL_EXT_XENOMAI is not set
+# BR2_LINUX_KERNEL_EXT_RTAI is not set
 # BR2_LINUX_KERNEL_EXT_EV3DEV_LINUX_DRIVERS is not set
 # BR2_LINUX_KERNEL_EXT_FBTFT is not set
 # BR2_LINUX_KERNEL_EXT_AUFS is not set
@@ -1264,7 +1265,7 @@ BR2_PACKAGE_QT6_ARCH_SUPPORTS=y
 # BR2_PACKAGE_BRLTTY is not set
 
 #
-# cc-tool needs a toolchain w/ C++, threads, wchar, gcc >= 4.9
+# cc-tool needs a toolchain w/ C++, threads, wchar, gcc >= 4.9 
 #
 # BR2_PACKAGE_CDRKIT is not set
 # BR2_PACKAGE_CRUCIBLE is not set
@@ -4556,7 +4557,7 @@ BR2_PACKAGE_TRACEROUTE=y
 # BR2_PACKAGE_VSFTPD is not set
 # BR2_PACKAGE_VTUN is not set
 # BR2_PACKAGE_WAVEMON is not set
-# BR2_PACKAGE_WGET is not set
+BR2_PACKAGE_WGET=y
 # BR2_PACKAGE_WHOIS is not set
 # BR2_PACKAGE_WIREGUARD_TOOLS is not set
 # BR2_PACKAGE_WIRELESS_REGDB is not set
@@ -4589,35 +4590,35 @@ BR2_PACKAGE_TRACEROUTE=y
 #
 
 #
-# Please note:
+# Please note:                                           
 #
 
 #
-# - Buildroot does *not* generate binary packages,
+# - Buildroot does *not* generate binary packages,       
 #
 
 #
-# - Buildroot does *not* install any package database.
+# - Buildroot does *not* install any package database.   
 #
 
 #
-# *
+# *                                                      
 #
 
 #
-# It is up to you to provide those by yourself if you
+# It is up to you to provide those by yourself if you    
 #
 
 #
-# want to use any of those package managers.
+# want to use any of those package managers.             
 #
 
 #
-# *
+# *                                                      
 #
 
 #
-# See the manual:
+# See the manual:                                        
 #
 
 #
@@ -6151,5 +6152,3 @@ BR2_TARGET_UBOOT_CUSTOM_PATCH_DIR=""
 # BR2_BINUTILS_VERSION_2_22 is not set
 # BR2_PACKAGE_GPU_VIV_BIN_MX6Q is not set
 # BR2_TARGET_UBOOT_NETWORK is not set
-
-
diff --git a/README.md b/README.md
index cdee930..f8772e1 100644
--- a/README.md
+++ b/README.md
@@ -29,7 +29,7 @@ disk installer (`mentalnet-install`).
 | R1 | FirstStorm | *Chūlán ~First Storm~ (初嵐～First Storm～)* — DECO*27 | Swap-free installer, true i586 support, terminal/input hardening, interrupt-storm fixes |
 | R1 | LovePara | *ラブパラ (Love Para)* — DECO*27 feat. Hatsune Miku | app-server stack (PHP/Ruby/Perl, php-fpm, lighttpd `/proxy/` → port 1337), tcc on-target C dev with glibc headers, socat, gesftpserver, SiS 900 / VIA Rhine / Tigon3 NICs, fastfetch, nano, en_US.UTF-8 locale |
 | R1 | StreamingHeart | *ストリーミングハート (Streaming Heart)* — DECO*27 feat. Hatsune Miku | `runmain.o` for tcc (run C files like scripts without permanent compilation), tmux, custom bash prompt |
-| R1 | **Ochatime** | *Ochatime* — 23.exe | **Current** — Linux 6.12.114 (PwnEscape/CVE-2026-99999 fix), PHP 8.3.36 security update (*php2shell*, CVE-2026-109618 / CVE-2026-109619), eMudhra (emSign) root CAs purged from the trust store |
+| R1 | **Ochatime** | *Ochatime* — 23.exe | **Current** — Linux 6.12.114 (PwnEscape/CVE-2026-99999 fix), PHP 8.3.36 security update (*php2shell*, CVE-2026-109618 / CVE-2026-109619), compromised eMudhra (emSign) roots removed, GNU Wget 1.25.0 with HTTPS/OpenSSL (BusyBox `wget` remains available via `busybox wget`) |
 
 ## Quick facts
 
@@ -65,6 +65,8 @@ meant to be applied on top of a pristine Buildroot checkout.
    | `board/mentalnet/` | `board/mentalnet/` |
    | `fs/iso9660/grub.cfg` | `fs/iso9660/grub.cfg` — **overwrites an upstream file** |
    | `.config` | `.config` |
+   | `linux/linux.hash` | `linux/linux.hash` — includes the Linux 6.12.114 source hash |
+   | `package/php/php.mk`, `package/php/php.hash` | same paths — PHP 8.3.36 |
    | `logos/`, `README.md`, `LICENSE` | same paths (repo-local, not used by the build) |
 
 3. Build:
@@ -83,6 +85,8 @@ The committed `.config` is based on the default i386 defconfig plus
 the Mentalnet selections (GRUB2 embedded config, e2fsprogs, getty
 TERM, and so on). Copying it reproduces the released system exactly;
 alternatively, start fresh with `make menuconfig` and roll your own.
+The target kernel is pinned to 6.12.114, while the internal toolchain
+uses Buildroot's 6.12.104 kernel headers; this separation is intentional.
 
 ## Security after install