diff --git a/recipes/incoming/ali.toml b/recipes/ali.toml
similarity index 100%
rename from recipes/incoming/ali.toml
rename to recipes/ali.toml
diff --git a/recipes/incoming/amass.toml b/recipes/amass.toml
similarity index 100%
rename from recipes/incoming/amass.toml
rename to recipes/amass.toml
diff --git a/recipes/incoming/elvish.toml b/recipes/elvish.toml
similarity index 100%
rename from recipes/incoming/elvish.toml
rename to recipes/elvish.toml
diff --git a/recipes/incoming/gh-dash.toml b/recipes/gh-dash.toml
similarity index 100%
rename from recipes/incoming/gh-dash.toml
rename to recipes/gh-dash.toml
diff --git a/recipes/incoming/hostctl.toml b/recipes/hostctl.toml
similarity index 100%
rename from recipes/incoming/hostctl.toml
rename to recipes/hostctl.toml
diff --git a/recipes/incoming/httprobe.toml b/recipes/httprobe.toml
similarity index 100%
rename from recipes/incoming/httprobe.toml
rename to recipes/httprobe.toml
diff --git a/recipes/incoming/apko.toml b/recipes/incoming/apko.toml
new file mode 100644
index 00000000..fab09628
--- /dev/null
+++ b/recipes/incoming/apko.toml
@@ -0,0 +1,42 @@
+# Importada de Alpine aports por `hammer import-alpine` (Etapa G). PUNTO DE PARTIDA — pero
+# YA trae los parches de musl de Alpine (lo que un import de nix pierde). Pendiente: el
+# sha256 del tarball (el wrapper lo calcula), y adaptar build/install del shell de abuild.
+name    = "apko"
+version = "0.9.0"
+
+[source]
+tarball = "https://github.com/chainguard-dev/apko/archive/v0.9.0/apko-0.9.0.tar.gz"
+# FIXME sha256: el wrapper lo calcula (Alpine publica sha512). sha512 de Alpine:
+# sha512 = "c8883955a99811762c3d358549d041c464a1dfe67f24b63666664c72dc2d0bb10b8ff517a8205c14d56a826bd0d02770aa254eefa06c50026e91833319387f24"
+sha256  = "65f248fecf72ef36303e6c61c5599272f1a0d3eb1fa287a6f021917001e29a0b"
+
+[build]
+compiler = "zig-cc"
+target   = "x86_64-linux-musl"
+link     = "static"
+flags    = []
+
+[build.phases]
+# de build() de Alpine (traducido; el lab provee $CBUILD/$CHOST — Etapa G Fase 3; revisá --shared para estático):
+compile = '''
+_abuild_phase() {
+mkdir build
+	go build -o build/ -tags -tags=pivkey,pkcs11key "$builddir"/...
+
+	for i in bash fish zsh; do
+		"$builddir"/build/apko completion $i > "$builddir"/apko.$i
+	done
+}
+_abuild_phase
+'''
+# de package() de Alpine (traducido $pkgdir→/out):
+install = '''
+_abuild_phase() {
+install -Dm755 "$builddir"/build/apko "/out"/usr/bin/apko
+
+	install -Dm644 "$builddir"/apko.bash "/out"/usr/share/bash-completion/completions/apko
+	install -Dm644 "$builddir"/apko.fish "/out"/usr/share/fish/vendor_completions.d/apko.fish
+	install -Dm644 "$builddir"/apko.zsh "/out"/usr/share/zsh/site-functions/_apko
+}
+_abuild_phase
+'''
diff --git a/recipes/incoming/caddy.toml b/recipes/incoming/caddy.toml
new file mode 100644
index 00000000..30dd2f5f
--- /dev/null
+++ b/recipes/incoming/caddy.toml
@@ -0,0 +1,20 @@
+# Importada de nixpkgs por `hammer import-nix` (Etapa G). PUNTO DE PARTIDA, no final:
+# - el build usa el lab de hammer (zig-cc / musl estático), NO el stdenv de nix ⇒ revisá
+#   compiler/link/phases y adaptá hasta que compile.
+# - las deps van con su nombre NIX; remapealas a las recetas del corpus si difieren.
+name    = "caddy"
+version = "2.11.4"
+
+[source]
+repo   = "https://github.com/caddyserver/caddy"
+commit = "v2.11.4"
+
+[build]
+compiler = "zig-cc"
+target   = "x86_64-linux-musl"
+link     = "static"
+flags    = []
+
+# buildInputs de nix (no usados con CGO off): go
+[deps]
+build = ["go"]
diff --git a/recipes/incoming/doctl.toml b/recipes/incoming/doctl.toml
new file mode 100644
index 00000000..1cc284d3
--- /dev/null
+++ b/recipes/incoming/doctl.toml
@@ -0,0 +1,20 @@
+# Importada de nixpkgs por `hammer import-nix` (Etapa G). PUNTO DE PARTIDA, no final:
+# - el build usa el lab de hammer (zig-cc / musl estático), NO el stdenv de nix ⇒ revisá
+#   compiler/link/phases y adaptá hasta que compile.
+# - las deps van con su nombre NIX; remapealas a las recetas del corpus si difieren.
+name    = "doctl"
+version = "1.160.1"
+
+[source]
+repo   = "https://github.com/digitalocean/doctl"
+commit = "v1.160.1"
+
+[build]
+compiler = "zig-cc"
+target   = "x86_64-linux-musl"
+link     = "static"
+flags    = []
+
+# buildInputs de nix (no usados con CGO off): go
+[deps]
+build = ["go"]
diff --git a/recipes/incoming/earthly.toml b/recipes/incoming/earthly.toml
new file mode 100644
index 00000000..57d3291c
--- /dev/null
+++ b/recipes/incoming/earthly.toml
@@ -0,0 +1,20 @@
+# Importada de nixpkgs por `hammer import-nix` (Etapa G). PUNTO DE PARTIDA, no final:
+# - el build usa el lab de hammer (zig-cc / musl estático), NO el stdenv de nix ⇒ revisá
+#   compiler/link/phases y adaptá hasta que compile.
+# - las deps van con su nombre NIX; remapealas a las recetas del corpus si difieren.
+name    = "earthly"
+version = "0.8.16"
+
+[source]
+repo   = "https://github.com/earthly/earthly"
+commit = "v0.8.16"
+
+[build]
+compiler = "zig-cc"
+target   = "x86_64-linux-musl"
+link     = "static"
+flags    = []
+
+# buildInputs de nix (no usados con CGO off): go
+[deps]
+build = ["go"]
diff --git a/recipes/incoming/gptscript.toml b/recipes/incoming/gptscript.toml
new file mode 100644
index 00000000..78961525
--- /dev/null
+++ b/recipes/incoming/gptscript.toml
@@ -0,0 +1,20 @@
+# Importada de nixpkgs por `hammer import-nix` (Etapa G). PUNTO DE PARTIDA, no final:
+# - el build usa el lab de hammer (zig-cc / musl estático), NO el stdenv de nix ⇒ revisá
+#   compiler/link/phases y adaptá hasta que compile.
+# - las deps van con su nombre NIX; remapealas a las recetas del corpus si difieren.
+name    = "gptscript"
+version = "0.9.9"
+
+[source]
+repo   = "https://github.com/gptscript-ai/gptscript"
+commit = "v0.9.9"
+
+[build]
+compiler = "zig-cc"
+target   = "x86_64-linux-musl"
+link     = "static"
+flags    = []
+
+# buildInputs de nix (no usados con CGO off): go
+[deps]
+build = ["go"]
diff --git a/recipes/incoming/hcloud.toml b/recipes/incoming/hcloud.toml
new file mode 100644
index 00000000..1c736188
--- /dev/null
+++ b/recipes/incoming/hcloud.toml
@@ -0,0 +1,20 @@
+# Importada de nixpkgs por `hammer import-nix` (Etapa G). PUNTO DE PARTIDA, no final:
+# - el build usa el lab de hammer (zig-cc / musl estático), NO el stdenv de nix ⇒ revisá
+#   compiler/link/phases y adaptá hasta que compile.
+# - las deps van con su nombre NIX; remapealas a las recetas del corpus si difieren.
+name    = "hcloud"
+version = "1.64.1"
+
+[source]
+repo   = "https://github.com/hetznercloud/cli"
+commit = "v1.64.1"
+
+[build]
+compiler = "zig-cc"
+target   = "x86_64-linux-musl"
+link     = "static"
+flags    = []
+
+# buildInputs de nix (no usados con CGO off): go
+[deps]
+build = ["go"]
diff --git a/recipes/incoming/hugo.toml b/recipes/incoming/hugo.toml
new file mode 100644
index 00000000..a07ac86e
--- /dev/null
+++ b/recipes/incoming/hugo.toml
@@ -0,0 +1,20 @@
+# Importada de nixpkgs por `hammer import-nix` (Etapa G). PUNTO DE PARTIDA, no final:
+# - el build usa el lab de hammer (zig-cc / musl estático), NO el stdenv de nix ⇒ revisá
+#   compiler/link/phases y adaptá hasta que compile.
+# - las deps van con su nombre NIX; remapealas a las recetas del corpus si difieren.
+name    = "hugo"
+version = "0.163.2"
+
+[source]
+repo   = "https://github.com/gohugoio/hugo"
+commit = "v0.163.2"
+
+[build]
+compiler = "zig-cc"
+target   = "x86_64-linux-musl"
+link     = "static"
+flags    = []
+
+# buildInputs de nix (no usados con CGO off): go
+[deps]
+build = ["go"]
diff --git a/recipes/incoming/jc.toml b/recipes/incoming/jc.toml
new file mode 100644
index 00000000..fdbf7bb6
--- /dev/null
+++ b/recipes/incoming/jc.toml
@@ -0,0 +1,19 @@
+# Importada de nixpkgs por `hammer import-nix` (Etapa G). PUNTO DE PARTIDA, no final:
+# - el build usa el lab de hammer (zig-cc / musl estático), NO el stdenv de nix ⇒ revisá
+#   compiler/link/phases y adaptá hasta que compile.
+# - las deps van con su nombre NIX; remapealas a las recetas del corpus si difieren.
+name    = "jc"
+version = "1.25.7"
+
+[source]
+repo   = "https://github.com/kellyjonbrazil/jc"
+commit = "v1.25.7"
+
+[build]
+compiler = "zig-cc"
+target   = "x86_64-linux-musl"
+link     = "static"
+flags    = []
+
+[deps]
+build = ["python3"]
diff --git a/recipes/incoming/mani.toml b/recipes/incoming/mani.toml
new file mode 100644
index 00000000..ab37a96e
--- /dev/null
+++ b/recipes/incoming/mani.toml
@@ -0,0 +1,20 @@
+# Importada de nixpkgs por `hammer import-nix` (Etapa G). PUNTO DE PARTIDA, no final:
+# - el build usa el lab de hammer (zig-cc / musl estático), NO el stdenv de nix ⇒ revisá
+#   compiler/link/phases y adaptá hasta que compile.
+# - las deps van con su nombre NIX; remapealas a las recetas del corpus si difieren.
+name    = "mani"
+version = "0.32.1"
+
+[source]
+repo   = "https://github.com/alajmo/mani"
+commit = "v0.32.1"
+
+[build]
+compiler = "zig-cc"
+target   = "x86_64-linux-musl"
+link     = "static"
+flags    = []
+
+# buildInputs de nix (no usados con CGO off): go
+[deps]
+build = ["go"]
diff --git a/recipes/incoming/turso.toml b/recipes/incoming/turso.toml
new file mode 100644
index 00000000..084e7bfd
--- /dev/null
+++ b/recipes/incoming/turso.toml
@@ -0,0 +1,19 @@
+# Importada de nixpkgs por `hammer import-nix` (Etapa G). PUNTO DE PARTIDA, no final:
+# - el build usa el lab de hammer (zig-cc / musl estático), NO el stdenv de nix ⇒ revisá
+#   compiler/link/phases y adaptá hasta que compile.
+# - las deps van con su nombre NIX; remapealas a las recetas del corpus si difieren.
+name    = "turso"
+version = "0.6.1"
+
+[source]
+repo   = "https://github.com/tursodatabase/turso"
+commit = "v0.6.1"
+
+[build]
+compiler = "zig-cc"
+target   = "x86_64-linux-musl"
+link     = "static"
+flags    = ["--bin", "tursodb"]
+
+[build.phases]
+install = "mkdir -p /out/usr/bin && cp target/release/tursodb /out/usr/bin/tursodb"
diff --git a/recipes/incoming/witness.toml b/recipes/incoming/witness.toml
new file mode 100644
index 00000000..e79c8624
--- /dev/null
+++ b/recipes/incoming/witness.toml
@@ -0,0 +1,20 @@
+# Importada de nixpkgs por `hammer import-nix` (Etapa G). PUNTO DE PARTIDA, no final:
+# - el build usa el lab de hammer (zig-cc / musl estático), NO el stdenv de nix ⇒ revisá
+#   compiler/link/phases y adaptá hasta que compile.
+# - las deps van con su nombre NIX; remapealas a las recetas del corpus si difieren.
+name    = "witness"
+version = "0.11.0"
+
+[source]
+repo   = "https://github.com/in-toto/witness"
+commit = "v0.11.0"
+
+[build]
+compiler = "zig-cc"
+target   = "x86_64-linux-musl"
+link     = "static"
+flags    = []
+
+# buildInputs de nix (no usados con CGO off): go
+[deps]
+build = ["go"]
diff --git a/recipes/incoming/infracost.toml b/recipes/infracost.toml
similarity index 100%
rename from recipes/incoming/infracost.toml
rename to recipes/infracost.toml
diff --git a/recipes/incoming/kail.toml b/recipes/kail.toml
similarity index 100%
rename from recipes/incoming/kail.toml
rename to recipes/kail.toml
diff --git a/recipes/incoming/kor.toml b/recipes/kor.toml
similarity index 100%
rename from recipes/incoming/kor.toml
rename to recipes/kor.toml
diff --git a/recipes/incoming/micro.toml b/recipes/micro.toml
similarity index 100%
rename from recipes/incoming/micro.toml
rename to recipes/micro.toml
diff --git a/recipes/incoming/murex.toml b/recipes/murex.toml
similarity index 100%
rename from recipes/incoming/murex.toml
rename to recipes/murex.toml
diff --git a/recipes/incoming/s5cmd.toml b/recipes/s5cmd.toml
similarity index 100%
rename from recipes/incoming/s5cmd.toml
rename to recipes/s5cmd.toml
diff --git a/recipes/incoming/shuffledns.toml b/recipes/shuffledns.toml
similarity index 100%
rename from recipes/incoming/shuffledns.toml
rename to recipes/shuffledns.toml
diff --git a/recipes/incoming/terraform-docs.toml b/recipes/terraform-docs.toml
similarity index 100%
rename from recipes/incoming/terraform-docs.toml
rename to recipes/terraform-docs.toml
diff --git a/recipes/incoming/tflint.toml b/recipes/tflint.toml
similarity index 100%
rename from recipes/incoming/tflint.toml
rename to recipes/tflint.toml
diff --git a/recipes/incoming/tfsec.toml b/recipes/tfsec.toml
similarity index 100%
rename from recipes/incoming/tfsec.toml
rename to recipes/tfsec.toml
diff --git a/tandas/fuel-go-7.txt b/tandas/fuel-go-7.txt
new file mode 100644
index 00000000..78f85b23
--- /dev/null
+++ b/tandas/fuel-go-7.txt
@@ -0,0 +1,20 @@
+# fuel-go-7 — buffer premasticado ronda 7 (cloud/supply-chain).
+apko
+bom
+caddy
+dagger
+doctl
+earthly
+fabric
+flyctl
+gohugo
+gptscript
+hcloud
+hugo
+jc
+mani
+sake
+scorecard
+turso
+witness
+yh
diff --git a/recipes/incoming/aws-vault.toml b/tandas/staged-fallidos/aws-vault.toml
similarity index 100%
rename from recipes/incoming/aws-vault.toml
rename to tandas/staged-fallidos/aws-vault.toml
diff --git a/recipes/incoming/nerdctl.toml b/tandas/staged-fallidos/nerdctl.toml
similarity index 100%
rename from recipes/incoming/nerdctl.toml
rename to tandas/staged-fallidos/nerdctl.toml
diff --git a/recipes/incoming/terrascan.toml b/tandas/staged-fallidos/terrascan.toml
similarity index 100%
rename from recipes/incoming/terrascan.toml
rename to tandas/staged-fallidos/terrascan.toml