diff --git a/next.config.mjs b/next.config.mjs
index 60ba6fd..cf039fb 100644
--- a/next.config.mjs
+++ b/next.config.mjs
@@ -14,10 +14,11 @@ const nextConfig = {
       {
         source: "/(.*)",
         headers: [
-          {
-            key: "X-Content-Type-Options",
-            value: "nosniff",
-          },
+          { key: "X-Content-Type-Options", value: "nosniff" },
+          // SharedArrayBuffer для onnxruntime-web threaded WASM (нужен на iOS).
+          // credentialless менее строгий чем require-corp — не ломает Google Fonts.
+          { key: "Cross-Origin-Opener-Policy", value: "same-origin" },
+          { key: "Cross-Origin-Embedder-Policy", value: "credentialless" },
         ],
       },
     ];