etapa 4: tanda de 30 HOJAS — cero daño colateral, que era el punto

Primera tanda con el orden nuevo (por impacto en el grafo, no alfabético). 30 recetas C de
clase HOJA: bash, coreutils, git, gnupg, grep, gzip, jq, e2fsprogs, libarchive, htop…

LA MEDIDA QUE JUSTIFICA EL CAMBIO DE ORDEN: activar estas 30 dejó 41 recetas sin artefacto
vigente = las 12 que ya estaban en deuda + las 30 tocadas (una ya estaba entre las 12). **Cero
colateral.** Contra la tanda anterior, donde tocar TRES bibliotecas base (expat, zstd, ncurses)
dejó 54 sin artefacto y tumbó la cadena wlroots/sway entera.

Mismo esfuerzo de build, diez veces menos destrozo. El orden no era un detalle de comodidad.

Selección: clase `c` + `dependientes_total == 0` + estado sellado, excluyendo las de tawasuyu
(git privado ⇒ no construyen en el worker, que es sin secretos por diseño) y las Go/Rust, que
necesitan sus módulos y fallan ahí. Quedan 73 hojas C elegibles; van 30.

La tanda corre DESASIDA con nohup en el worker — la lección de ayer, cuando un drenaje murió a
las 14 de 54 al caerse la sesión ssh.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>

recipes/bash.toml

@@ -13,6 +13,9 @@ sha256  = "0d5cd86965f869a26cf64f4b71be7b96f90a3ba8b3d74e27e8e9d9d5550f31ba"
 compiler = "zig-cc"
 target   = "x86_64-linux-musl"
 link     = "static"
+
+# Split de la info de depuración (SDD 23 etapa 4, tanda de HOJAS). Entra en `hash_inputs`.
+strip_debug = true
 flags    = []
 
 [build.phases]
@@ -46,4 +49,4 @@ _abuild_phase
 '''
 
 [deps]
-build = ["ncurses", "readline", "linux-headers", "make"]
+build = ["binutils", "ncurses", "readline", "linux-headers", "make"]

recipes/brotli.toml

@@ -15,6 +15,9 @@ patches = ["optimize-mips.patch", "fix-lp64.patch"]
 compiler = "zig-cc"
 target   = "x86_64-linux-musl"
 link     = "static"
+
+# Split de la info de depuración (SDD 23 etapa 4, tanda de HOJAS). Entra en `hash_inputs`.
+strip_debug = true
 flags    = []
 
 [build.phases]
@@ -24,4 +27,4 @@ compile   = "cmake --build build"
 install   = "DESTDIR=/out cmake --install build"
 
 [deps]
-build = ["cmake"]
+build = ["binutils", "cmake"]

recipes/bwrap.toml

@@ -31,8 +31,11 @@ compiler = "zig-cc"
 target   = "x86_64-linux-musl"
 link     = "static"
 
+# Split de la info de depuración (SDD 23 etapa 4, tanda de HOJAS). Entra en `hash_inputs`.
+strip_debug = true
+
 [deps]
-build = ["libcap"]
+build = ["binutils", "libcap"]
 
 [build.phases]
 # El árbol detecta como BuildSys::Meson ⇒ el default `meson setup` fallaría (no hay meson). Override

recipes/bzip2.toml

@@ -10,9 +10,12 @@ sha256  = "ab5a03176ee106d3f0fa90e381da478ddae405918153cca248e682cd0c4a2269"
 compiler = "zig-cc"
 target   = "x86_64-linux-musl"
 link     = "static"
+
+# Split de la info de depuración (SDD 23 etapa 4, tanda de HOJAS). Entra en `hash_inputs`.
+strip_debug = true
 flags    = []
 [deps]
-build = ["make"]
+build = ["binutils", "make"]
 
 [build.phases]
 # CC="$CC" explícito: el Makefile de bzip2 HARDCODEA `CC=gcc` en su cabecera, así que un `make` a

recipes/ca-certificates.toml

@@ -15,13 +15,16 @@ sha256  = "32ca73f2e81e2b88dc614f12e1ee04a82b1ec5a8e29d9f359ddf8905a0afcbb0"
 compiler = "zig-cc"
 target   = "x86_64-linux-musl"
 link     = "static"
+
+# Split de la info de depuración (SDD 23 etapa 4, tanda de HOJAS). Entra en `hash_inputs`.
+strip_debug = true
 flags    = []
 
 # openssl aporta libcrypto.a al overlay del sandbox (/usr/lib) para enlazar c_rehash
 # (`-lcrypto`). El resto del build (mk-ca-bundle.pl → cert.pem → split-ca-bundle.sh) usa
 # el perl + coreutils del rootfs; no requiere el CLI de openssl.
 [deps]
-build = ["openssl", "perl"]
+build = ["binutils", "openssl", "perl"]
 
 [build.phases]
 # de build() de Alpine (traducido; el lab provee $CBUILD/$CHOST — Etapa G Fase 3; revisá --shared para estático):

recipes/cargo-audit.toml

@@ -15,7 +15,10 @@ sha256  = "262d42fcca5db8629b6220d84e62e7ffda913846a36089a847ffe276e6b09446"
 compiler = "gcc"
 target   = "x86_64-linux-musl"
 link     = "static"
+
+# Split de la info de depuración (SDD 23 etapa 4, tanda de HOJAS). Entra en `hash_inputs`.
+strip_debug = true
 flags    = ["--features", "fix", "--bin", "cargo-audit"]
 
 [deps]
-build = ["zlib"]
+build = ["binutils", "zlib"]

recipes/cargo-hack.toml

@@ -14,4 +14,10 @@ sha256  = "b7b921beacdbb815dc89a04024f48f1b1735daef890d2398e04f27f006c1d38e"
 compiler = "zig-cc"
 target   = "x86_64-linux-musl"
 link     = "static"
+
+# Split de la info de depuración (SDD 23 etapa 4, tanda de HOJAS). Entra en `hash_inputs`.
+strip_debug = true
 flags    = ["--bin", "cargo-hack"]
+
+[deps]
+build = ["binutils"]

recipes/coreutils.toml

@@ -28,12 +28,15 @@ sha256  = "1be88d53f694671cf7fb85e7723dbd1de9131d031880161b452a0685b986296e"
 compiler = "zig-cc"
 target   = "x86_64-linux-musl"
 link     = "static"
+
+# Split de la info de depuración (SDD 23 etapa 4, tanda de HOJAS). Entra en `hash_inputs`.
+strip_debug = true
 # --enable-single-binary: un solo binario multicall + symlinks (layout Alpine). --disable-nls: sin
 # gettext (ausente). Las flags van al ./configure (AutoconfReady).
 flags    = ["--enable-single-binary", "--disable-nls"]
 
 [deps]
-build = ["make"]
+build = ["binutils", "make"]
 
 [build.phases]
 # install por defecto (make install DESTDIR=/out) deja el multicall en /out/usr/bin/coreutils; lo

recipes/dhcpcd.toml

@@ -16,6 +16,9 @@ patches = ["busybox-logger.patch", "fix-chrony-conf-location.patch"]
 compiler = "zig-cc"
 target   = "x86_64-linux-musl"
 link     = "static"
+
+# Split de la info de depuración (SDD 23 etapa 4, tanda de HOJAS). Entra en `hash_inputs`.
+strip_debug = true
 flags    = []
 
 [build.phases]
@@ -50,4 +53,4 @@ _abuild_phase
 '''
 
 [deps]
-build = ["linux-headers", "make", "pkgconf"]
+build = ["binutils", "linux-headers", "make", "pkgconf"]

recipes/doas.toml

@@ -16,6 +16,9 @@ patches = ["configuration-directory.patch", "manpage-example-path.patch", "chang
 compiler = "zig-cc"
 target   = "x86_64-linux-musl"
 link     = "static"
+
+# Split de la info de depuración (SDD 23 etapa 4, tanda de HOJAS). Entra en `hash_inputs`.
+strip_debug = true
 flags    = []
 
 [build.phases]
@@ -43,4 +46,4 @@ _abuild_phase
 '''
 
 [deps]
-build = ["bison", "make"]
+build = ["binutils", "bison", "make"]

recipes/dosfstools.toml

@@ -15,6 +15,9 @@ sha256  = "64926eebf90092dca21b14259a5301b7b98e7b1943e8a201c7d726084809b527"
 compiler = "zig-cc"
 target   = "x86_64-linux-musl"
 link     = "static"
+
+# Split de la info de depuración (SDD 23 etapa 4, tanda de HOJAS). Entra en `hash_inputs`.
+strip_debug = true
 flags    = []
 
 [build.phases]
@@ -44,4 +47,4 @@ _abuild_phase
 '''
 
 [deps]
-build = ["linux-headers", "make"]
+build = ["binutils", "linux-headers", "make"]

recipes/e2fsprogs.toml

@@ -15,6 +15,9 @@ sha256  = "9f82eaa7002673291629077b80ee005cadfcd49854907a22007fed70b0ef596e"
 compiler = "zig-cc"
 target   = "x86_64-linux-musl"
 link     = "static"
+
+# Split de la info de depuración (SDD 23 etapa 4, tanda de HOJAS). Entra en `hash_inputs`.
+strip_debug = true
 flags    = []
 
 [build.phases]
@@ -60,4 +63,4 @@ _abuild_phase
 '''
 
 [deps]
-build = ["linux-headers", "pkgconf"]
+build = ["binutils", "linux-headers", "pkgconf"]

recipes/file.toml

@@ -15,10 +15,13 @@ patches = ["0001-softmagic-compare-FILE_GUID-values-in-wire-format.patch", "0002
 compiler = "gcc"
 target   = "x86_64-linux-musl"
 link     = "static"
+
+# Split de la info de depuración (SDD 23 etapa 4, tanda de HOJAS). Entra en `hash_inputs`.
+strip_debug = true
 flags    = []
 
 [deps]
-build = ["make"]
+build = ["binutils", "make"]
 
 [build.phases]
 # De build()/package() de Alpine (el lab provee $CBUILD/$CHOST — Etapa G Fase 3).

recipes/gawk.toml

@@ -16,10 +16,13 @@ patches = ["echild-strerror.patch"]
 compiler = "zig-cc"
 target   = "x86_64-linux-musl"
 link     = "static"
+
+# Split de la info de depuración (SDD 23 etapa 4, tanda de HOJAS). Entra en `hash_inputs`.
+strip_debug = true
 flags    = []
 
 [deps]
-build = ["make"]
+build = ["binutils", "make"]
 
 [build.phases]
 # de build() de Alpine (traducido; el lab provee $CBUILD/$CHOST — Etapa G Fase 3; revisá --shared para estático):

recipes/git-absorb.toml

@@ -16,7 +16,10 @@ sha256  = "a0f74e6306d7fbd746d2b4a6856621d46a7f82e3e88b6bb8b6fc0480cf811f53"
 compiler = "gcc"
 target   = "x86_64-linux-musl"
 link     = "static"
+
+# Split de la info de depuración (SDD 23 etapa 4, tanda de HOJAS). Entra en `hash_inputs`.
+strip_debug = true
 flags    = ["--bin", "git-absorb"]
 
 [deps]
-build = ["zlib"]
+build = ["binutils", "zlib"]

recipes/git-quick-stats.toml

@@ -14,4 +14,10 @@ commit = "125eec713664aaadf9ba22185848a8db5ab986ca"
 compiler = "zig-cc"
 target   = "x86_64-linux-musl"
 link     = "static"
+
+# Split de la info de depuración (SDD 23 etapa 4, tanda de HOJAS). Entra en `hash_inputs`.
+strip_debug = true
 flags    = []
+
+[deps]
+build = ["binutils"]

recipes/git.toml

@@ -16,6 +16,9 @@ patches = ["fix-t4219-with-sticky-bit.patch"]
 compiler = "zig-cc"
 target   = "x86_64-linux-musl"
 link     = "static"
+
+# Split de la info de depuración (SDD 23 etapa 4, tanda de HOJAS). Entra en `hash_inputs`.
+strip_debug = true
 flags    = []
 
 [build.phases]
@@ -46,4 +49,4 @@ make prefix=/usr DESTDIR="/out" CC="${CC:-cc}" \
 # depends de runtime de Alpine (NO build-deps): perl
 
 [deps]
-build = ["zlib", "openssl", "curl", "pcre2", "linux-headers", "perl"]
+build = ["binutils", "zlib", "openssl", "curl", "pcre2", "linux-headers", "perl"]

recipes/gnupg.toml

@@ -15,6 +15,9 @@ patches = ["0001-include-unistd.patch", "0010-avoid-beta-warning.patch", "0020-a
 compiler = "zig-cc"
 target   = "x86_64-linux-musl"
 link     = "static"
+
+# Split de la info de depuración (SDD 23 etapa 4, tanda de HOJAS). Entra en `hash_inputs`.
+strip_debug = true
 flags    = []
 
 [build.phases]
@@ -58,4 +61,4 @@ rm -f usr/bin/gpgscm
 '''
 
 [deps]
-build = ["libgpg-error", "libgcrypt", "libassuan", "libksba", "npth", "zlib", "linux-headers", "pkgconf", "make"]
+build = ["binutils", "libgpg-error", "libgcrypt", "libassuan", "libksba", "npth", "zlib", "linux-headers", "pkgconf", "make"]

recipes/grep.toml

@@ -19,6 +19,12 @@ sha256  = "badda546dfc4b9d97e992e2c35f3b5c7f20522ffcbe2f01ba1e9cdcbe7644cdc"
 compiler = "zig-cc"
 target   = "x86_64-linux-musl"
 link     = "static"
+
+# Split de la info de depuración (SDD 23 etapa 4, tanda de HOJAS). Entra en `hash_inputs`.
+strip_debug = true
 # Sin PCRE para el primer build — la receta de pcre2 vive en su propia .toml y se
 # añadirá como dep cuando empezemos a construir el grafo.
 flags    = ["--disable-perl-regexp", "--disable-nls"]
+
+[deps]
+build = ["binutils"]

recipes/gzip.toml

@@ -15,10 +15,13 @@ sha256  = "01a7b881bd220bfdf615f97b8718f80bdfd3f6add385b993dcf6efd14e8c0ac6"
 compiler = "zig-cc"
 target   = "x86_64-linux-musl"
 link     = "static"
+
+# Split de la info de depuración (SDD 23 etapa 4, tanda de HOJAS). Entra en `hash_inputs`.
+strip_debug = true
 flags    = []
 
 [deps]
-build = ["make"]
+build = ["binutils", "make"]
 
 [build.phases]
 # de build() de Alpine (traducido; el lab provee $CBUILD/$CHOST — Etapa G Fase 3; revisá --shared para estático):

recipes/hammerd.toml

@@ -19,5 +19,11 @@ commit = "e9b055121322d3ef8aef8e75738052d5aff0693a"
 compiler = "zig-cc"
 target   = "x86_64-linux-musl"
 link     = "static"
+
+# Split de la info de depuración (SDD 23 etapa 4, tanda de HOJAS). Entra en `hash_inputs`.
+strip_debug = true
 # Sólo el binario `hammerd` del workspace (no el resto de crates).
 flags    = ["-p", "hammerd"]
+
+[deps]
+build = ["binutils"]

recipes/htop.toml

@@ -24,10 +24,13 @@ compiler = "zig-cc"
 target   = "x86_64-linux-musl"
 link     = "static"
 
+# Split de la info de depuración (SDD 23 etapa 4, tanda de HOJAS). Entra en `hash_inputs`.
+strip_debug = true
+
 [build.phases]
 configure = "./configure --build=$CBUILD --host=$CHOST --prefix=/usr --sysconfdir=/etc --mandir=/usr/share/man --enable-cgroup --enable-taskstats --disable-sensors"
 compile   = "make -j\"$(nproc)\""
 install   = "make DESTDIR=/out install"
 
 [deps]
-build = ["ncurses", "linux-headers", "make"]
+build = ["binutils", "ncurses", "linux-headers", "make"]

recipes/iproute2.toml

@@ -15,6 +15,9 @@ sha256  = "fd9fa1b95809417157ca83dd72957e3261bdbce896353cb936f80af0b33a4b5c"
 compiler = "zig-cc"
 target   = "x86_64-linux-musl"
 link     = "static"
+
+# Split de la info de depuración (SDD 23 etapa 4, tanda de HOJAS). Entra en `hash_inputs`.
+strip_debug = true
 flags    = []
 
 [build.phases]
@@ -40,4 +43,4 @@ _abuild_phase
 '''
 
 [deps]
-build = ["linux-headers", "bison", "flex", "make", "pkgconf"]
+build = ["binutils", "linux-headers", "bison", "flex", "make", "pkgconf"]

recipes/iputils.toml

@@ -16,6 +16,9 @@ patches = ["0001-Use-getopt_long-for-opt-parsing-in-ping.patch"]
 compiler = "zig-cc"
 target   = "x86_64-linux-musl"
 link     = "static"
+
+# Split de la info de depuración (SDD 23 etapa 4, tanda de HOJAS). Entra en `hash_inputs`.
+strip_debug = true
 flags    = []
 
 [build.phases]
@@ -27,4 +30,4 @@ compile   = "ninja -C output"
 install   = "DESTDIR=/out ninja -C output install"
 
 [deps]
-build = ["libcap", "linux-headers", "meson", "samurai", "python3", "pkgconf"]
+build = ["binutils", "libcap", "linux-headers", "meson", "samurai", "python3", "pkgconf"]

recipes/jq.toml

@@ -36,10 +36,13 @@ compiler = "zig-cc"
 target   = "x86_64-linux-musl"
 link     = "static"
 
+# Split de la info de depuración (SDD 23 etapa 4, tanda de HOJAS). Entra en `hash_inputs`.
+strip_debug = true
+
 [build.phases]
 configure = "./configure --build=$CBUILD --host=$CHOST --prefix=/usr --disable-docs --disable-shared --enable-static"
 compile   = "make LDFLAGS=-all-static -j\"$(nproc)\""
 install   = "make DESTDIR=/out prefix=/usr LDFLAGS=-all-static install"
 
 [deps]
-build = ["oniguruma", "busybox", "make"]
+build = ["binutils", "oniguruma", "busybox", "make"]

recipes/kbd.toml

@@ -19,6 +19,9 @@ patches = ["lex.patch"]
 compiler = "zig-cc"
 target   = "x86_64-linux-musl"
 link     = "static"
+
+# Split de la info de depuración (SDD 23 etapa 4, tanda de HOJAS). Entra en `hash_inputs`.
+strip_debug = true
 flags    = []
 
 [build.phases]
@@ -60,4 +63,4 @@ ln -s openvt "/out"/usr/bin/open
 # deps de Alpine remapeadas al catálogo canónico. AUSENTES quitadas: ckbcomp/perl,
 # linux-pam, xkeyboard-config. flex compila el parser de keymaps (analyze.l).
 [deps]
-build = ["flex", "linux-headers", "make", "pkgconf"]
+build = ["binutils", "flex", "linux-headers", "make", "pkgconf"]

recipes/less.toml

@@ -22,10 +22,13 @@ compiler = "zig-cc"
 target   = "x86_64-linux-musl"
 link     = "static"
 
+# Split de la info de depuración (SDD 23 etapa 4, tanda de HOJAS). Entra en `hash_inputs`.
+strip_debug = true
+
 [build.phases]
 configure = "./configure --build=$CBUILD --host=$CHOST --prefix=/usr --sysconfdir=/etc --mandir=/usr/share/man"
 compile   = "make -j\"$(nproc)\""
 install   = "make DESTDIR=/out install"
 
 [deps]
-build = ["ncurses"]
+build = ["binutils", "ncurses"]

recipes/libarchive.toml

@@ -25,8 +25,11 @@ compiler = "zig-cc"
 target   = "x86_64-linux-musl"
 link     = "static"
 
+# Split de la info de depuración (SDD 23 etapa 4, tanda de HOJAS). Entra en `hash_inputs`.
+strip_debug = true
+
 [deps]
-build = ["make", "zlib"]
+build = ["binutils", "make", "zlib"]
 
 [build.phases]
 # -fno-sanitize=undefined: mismo motivo que zlib — sin él, zig cc emite llamadas UBSan que el

recipes/libsodium.toml

@@ -9,9 +9,12 @@ sha256  = "adbdd8f16149e81ac6078a03aca6fc03b592b89ef7b5ed83841c086191be3349"
 compiler = "gcc"
 target   = "x86_64-linux-musl"
 link     = "static"
+
+# Split de la info de depuración (SDD 23 etapa 4, tanda de HOJAS). Entra en `hash_inputs`.
+strip_debug = true
 flags    = []
 [deps]
-build = ["make"]
+build = ["binutils", "make"]
 
 [build.phases]
 configure = './configure --build=$CBUILD --host=$CHOST --prefix=/usr --disable-shared --enable-static'

recipes/libssh2.toml

@@ -9,10 +9,13 @@ sha256  = "d9ec76cbe34db98eec3539fe2c899d26b0c837cb3eb466a56b0f109cabf658f7"
 compiler = "zig-cc"
 target   = "x86_64-linux-musl"
 link     = "static"
+
+# Split de la info de depuración (SDD 23 etapa 4, tanda de HOJAS). Entra en `hash_inputs`.
+strip_debug = true
 flags    = []
 [build.phases]
 configure = './configure --build=$CBUILD --host=$CHOST --prefix=/usr --disable-shared --enable-static --with-crypto=openssl --disable-examples-build'
 compile   = 'make'
 install   = 'make DESTDIR=/out install'
 [deps]
-build = ["openssl", "zlib", "perl"]
+build = ["binutils", "openssl", "zlib", "perl"]