Cobalt turns Kobo e-readers into a sandboxed app platform, no jailbreak

Cobalt is an open-source runtime and app store for Kobo e-readers that adds native apps to stock hardware without replacing the boot chain. You flash it once over USB; after that, apps install, update, and remove themselves over Wi-Fi directly on the device, and a reboot always drops back to the standard Kobo reader. The project is independent and not affiliated with Rakuten Kobo, and so far only the Clara BW (N365) has a hardware-tested device profile — installs on other models are refused outright rather than attempted.

The architecture leans heavily on isolation and cryptographic verification. Each app is a static ARMv7 binary running in its own unprivileged process, and it can’t touch device resources directly: network, storage, audio, frontlight, and Wi-Fi are all capability-gated, with denials returned as ordinary values the app handles. The store pulls a signed catalog from a fixed GitHub release, and the runtime verifies the catalog, package, manifest, and binary before anything launches. Install and update transactions are recovery-safe, so an interrupted update leaves the device on its previous version. Developers get a Rust SDK where screens are described declaratively while the runtime manages e-ink refresh planning, navigation, and lifecycle, plus browser and on-device simulators.

What stands out is the distribution model: app releases are decoupled from platform releases. Merging an app pull request triggers a build that compiles it for ARM, signs it, and updates the catalog — no Cobalt version bump or reinstall needed, the app just appears in the store. Contributions are ordinary PRs gated on proof the app runs on real hardware. It’s a clean example of bringing a signed, sandboxed app ecosystem to locked-down consumer devices without rooting them, though the single supported model and ‘no warranty, modifies user storage’ caveats keep it firmly in enthusiast territory for now.