Web fonts are subject to the same domain restriction (font files must be on the same domain as the page using them), unless HTTP access controls are used to relax this restriction.
this might be a good clue. i’ll try hosting the fonts inside the kinopio repo so they’re served from the same url and not from an s3 bucket