diff --git a/lib/arduino.sh b/lib/arduino.sh
index 6411d32..3e5a72f 100644
--- a/lib/arduino.sh
+++ b/lib/arduino.sh
@@ -16,30 +16,31 @@ info "Arduino CLI installed: $(arduino-cli version 2>/dev/null | head -1)"
 
 arduino-cli config init 2>/dev/null || true
 
-# Allow insecure TLS for environments with broken/missing CA certs
-arduino-cli config set network.insecure true 2>/dev/null || true
-
 # Add ESP board manager URLs
 arduino-cli config add board_manager.additional_urls \
   https://raw.githubusercontent.com/espressif/arduino-esp32/gh-pages/package_esp32_index.json 2>/dev/null || true
 arduino-cli config add board_manager.additional_urls \
   https://arduino.esp8266.com/stable/package_esp8266com_index.json 2>/dev/null || true
 
-arduino-cli core update-index
+# Use --insecure for all network operations (corporate/WSL environments often
+# have broken CA chains that Go's TLS stack rejects)
+ACLI="arduino-cli --insecure"
+
+$ACLI core update-index
 
 info "Installing/updating AVR core..."
-arduino-cli core install arduino:avr
+$ACLI core install arduino:avr
 
 info "Installing/updating ESP32 core..."
-arduino-cli core install esp32:esp32
+$ACLI core install esp32:esp32
 
 info "Installing/updating ESP8266 core..."
-arduino-cli core install esp8266:esp8266
+$ACLI core install esp8266:esp8266
 
 # Upgrade all installed cores to latest
-arduino-cli core upgrade
+$ACLI core upgrade
 
 # Common libs (install is idempotent, upgrade updates them)
-arduino-cli lib install "Servo" "ArduinoJson" "Adafruit Unified Sensor" "DHT sensor library" 2>/dev/null || true
-arduino-cli lib upgrade 2>/dev/null || true
+$ACLI lib install "Servo" "ArduinoJson" "Adafruit Unified Sensor" "DHT sensor library" 2>/dev/null || true
+$ACLI lib upgrade 2>/dev/null || true
 info "Board cores & libraries installed/updated"