diff --git a/Formula/coreutils.rb b/Formula/coreutils.rb
new file mode 100644
index 0000000..23e09a4
--- /dev/null
+++ b/Formula/coreutils.rb
@@ -0,0 +1,133 @@
+require (Tap.fetch("automattic", "kandelo-homebrew").path/"Kandelo/formula_support/kandelo_formula_support").to_s
+
+class Coreutils < Formula
+  include KandeloFormulaSupport
+
+  desc "GNU file, shell, and text utilities for Kandelo"
+  homepage "https://www.gnu.org/software/coreutils/"
+  url "https://ftpmirror.gnu.org/gnu/coreutils/coreutils-9.6.tar.xz"
+  mirror "https://ftp.gnu.org/gnu/coreutils/coreutils-9.6.tar.xz"
+  sha256 "7a0124327b398fd9eb1a6abde583389821422c744ffa10734b24f557610d3283"
+  license "GPL-3.0-or-later"
+
+  depends_on "binaryen" => :build
+  depends_on "wabt" => :build
+
+  skip_clean "bin/coreutils"
+
+  def install
+    kandelo_require_arch!("wasm32")
+
+    kandelo_wasm_build do |root|
+      system kandelo_configure, *kandelo_std_configure_args,
+        "--disable-nls",
+        "--without-selinux",
+        "--without-libgmp",
+        "--without-openssl",
+        "--disable-acl",
+        "--disable-xattr",
+        "--disable-dependency-tracking",
+        "--enable-single-binary=symlinks",
+        "--enable-install-program=arch",
+        "--enable-no-install-program=stdbuf,pinky,who,users,uptime"
+      system "make", "-j#{ENV.make_jobs}"
+
+      coreutils = buildpath/"src/coreutils"
+      instrumented = buildpath/"src/coreutils.instrumented"
+      system "#{root}/scripts/run-wasm-fork-instrument.sh", coreutils, "-o", instrumented
+      mv instrumented, coreutils
+      kandelo_validate_wasm_artifact(coreutils, fork: :required)
+      system "make", "install"
+    end
+  end
+
+  test do
+    assert_path_exists man1/"ls.1"
+    assert_path_exists info/"coreutils.info"
+    assert_match(/ls \(GNU coreutils\) 9\.6$/,
+      kandelo_run_wasm(bin/"ls", ["--version"], preserve_argv0: true))
+    assert_equal "wasm32\n", kandelo_run_wasm(bin/"arch", [], preserve_argv0: true)
+    assert_match(/kill \(GNU coreutils\) 9\.6$/,
+      kandelo_run_wasm(bin/"kill", ["--version"], preserve_argv0: true))
+    assert_empty kandelo_run_wasm(
+      bin/"false", [], preserve_argv0: true, expected_status: 1
+    )
+
+    mkdir_output = kandelo_run_wasm(
+      bin/"mkdir", ["--verbose", "/tmp/coreutils-dir"], preserve_argv0: true
+    )
+    assert_match(/created directory.*coreutils-dir/, mkdir_output)
+    temp_dir = kandelo_run_wasm(
+      bin/"mktemp", ["--directory", "/tmp/coreutils.XXXXXX"], preserve_argv0: true
+    )
+    assert_match(%r{^/tmp/coreutils\.[A-Za-z0-9]{6}$}, temp_dir.chomp)
+    assert_equal "directory\n",
+      kandelo_run_wasm(bin/"stat", ["--format=%F", "/tmp"], preserve_argv0: true)
+
+    workspace = testpath/"workspace"
+    workspace.mkpath
+    (workspace/"source.txt").write("gamma\nalpha\nbeta\n")
+    cwd_env = { "KERNEL_CWD" => workspace }
+    kandelo_run_wasm(
+      bin/"coreutils", ["--coreutils-prog=mkdir", "nested"], env: cwd_env
+    )
+    kandelo_run_wasm(
+      bin/"coreutils", ["--coreutils-prog=cp", "source.txt", "nested/copy.txt"], env: cwd_env
+    )
+    assert_equal "gamma\nalpha\nbeta\n",
+      kandelo_run_wasm(
+        bin/"coreutils", ["--coreutils-prog=cat", "nested/copy.txt"], env: cwd_env
+      )
+    assert_equal "17 nested/copy.txt\n",
+      kandelo_run_wasm(
+        bin/"coreutils", ["--coreutils-prog=wc", "-c", "nested/copy.txt"], env: cwd_env
+      )
+
+    assert_equal "alpha\nbeta\ngamma\n",
+      kandelo_run_wasm(
+        bin/"sort", [], stdin: "gamma\nalpha\nbeta\n", preserve_argv0: true
+      )
+    assert_equal "name=coreutils value=0042\n",
+      kandelo_run_wasm(
+        bin/"printf", ["name=%s value=%04d\\n", "coreutils", "42"], preserve_argv0: true
+      )
+
+    assert_equal "51\n",
+      kandelo_run_wasm(bin/"expr", ["17", "*", "3"], preserve_argv0: true)
+    assert_equal "08\n10\n12\n",
+      kandelo_run_wasm(bin/"seq", ["-w", "8", "2", "12"], preserve_argv0: true)
+    assert_empty kandelo_run_wasm(
+      bin/"[", ["17", "-gt", "3", "]"], preserve_argv0: true
+    )
+
+    dependency_workspace = testpath/"dependency-workspace"
+    dependency_workspace.mkpath
+    (dependency_workspace/"remove-me.txt").write "remove me\n"
+    (dependency_workspace/"remove-tree/nested").mkpath
+    (dependency_workspace/"remove-tree/nested/file.txt").write "remove tree\n"
+    dependency_mount = { "/work" => dependency_workspace }
+    dependency_env = { "KERNEL_CWD" => "/work" }
+    assert_empty kandelo_run_wasm(
+      bin/"mkdir", ["-p", "created/nested"],
+      env: dependency_env, preserve_argv0: true, writable_host_directories: dependency_mount
+    )
+    assert_predicate dependency_workspace/"created/nested", :directory?
+    assert_empty kandelo_run_wasm(
+      bin/"rm", ["remove-me.txt"],
+      env: dependency_env, preserve_argv0: true, writable_host_directories: dependency_mount
+    )
+    refute_path_exists dependency_workspace/"remove-me.txt"
+    assert_empty kandelo_run_wasm(
+      bin/"rm", ["-r", "remove-tree"],
+      env: dependency_env, preserve_argv0: true, writable_host_directories: dependency_mount
+    )
+    refute_path_exists dependency_workspace/"remove-tree"
+
+    assert_empty kandelo_run_wasm(
+      bin/"timeout", ["1", "/bin/true"],
+      exec_programs:             { "/bin/true" => bin/"true" },
+      expected_fork_descendants: 1,
+      preserve_argv0:            true
+    )
+  end
+end
diff --git a/Formula/sharutils.rb b/Formula/sharutils.rb
new file mode 100644
index 0000000..ce649b1
--- /dev/null
+++ b/Formula/sharutils.rb
@@ -0,0 +1,197 @@
+require (Tap.fetch("automattic", "kandelo-homebrew").path/"Kandelo/formula_support/kandelo_formula_support").to_s
+
+class Sharutils < Formula
+  include KandeloFormulaSupport
+
+  GUEST_OPT_PREFIX = "/home/linuxbrew/.linuxbrew/opt/sharutils".freeze
+
+  desc "GNU shell archive and uuencoding tools for Kandelo"
+  homepage "https://savannah.gnu.org/projects/sharutils/"
+  url "https://ftpmirror.gnu.org/gnu/sharutils/sharutils-4.15.2.tar.xz"
+  sha256 "2b05cff7de5d7b646dc1669bc36c35fdac02ac6ae4b6c19cb3340d87ec553a9a"
+  license "GPL-3.0-or-later"
+
+  depends_on "binaryen" => :build
+  depends_on "wabt" => :build
+  depends_on "automattic/kandelo-homebrew/bzip2"
+  depends_on "automattic/kandelo-homebrew/coreutils"
+  depends_on "automattic/kandelo-homebrew/dash"
+  depends_on "automattic/kandelo-homebrew/grep"
+  depends_on "automattic/kandelo-homebrew/gzip"
+  depends_on "automattic/kandelo-homebrew/sed"
+  depends_on "automattic/kandelo-homebrew/xz"
+
+  skip_clean "bin/shar", "bin/unshar", "bin/uuencode", "bin/uudecode"
+
+  def install
+    kandelo_require_arch!("wasm32")
+
+    kandelo_wasm_build do |root|
+      stable_source = "/usr/src/sharutils-#{version}"
+      prefix_maps = {
+        buildpath.to_s => stable_source,
+        root.to_s      => "/usr/src/kandelo",
+        "/nix/store"   => "/usr/src/toolchain",
+      }.flat_map do |from, to|
+        [
+          "-ffile-prefix-map=#{from}=#{to}",
+          "-fdebug-prefix-map=#{from}=#{to}",
+          "-fmacro-prefix-map=#{from}=#{to}",
+        ]
+      end
+      ENV["CFLAGS"] = ["-O2", "-gline-tables-only", *prefix_maps].join(" ")
+
+      # Upstream runs a discovered host `compress` and treats that result as a
+      # target feature probe. Suppress it; the deprecated compress mode is not
+      # part of this target, while bzip2, gzip, and xz are declared below.
+      ENV["ac_cv_path_COMPRESS"] = "no"
+
+      # The 2015 release's generated headers rely on pre-GCC-10 common-symbol
+      # behavior. Keep the single initialized definition in each opts source.
+      %w[shar unshar uuencode uudecode].each do |program|
+        inreplace "src/#{program}-opts.h",
+          /^char const \* const program_name;$/,
+          "extern char const * const program_name;"
+      end
+
+      # `egrep` is obsolescent and is not a separate Kandelo package surface.
+      # Keep this replacement byte-sized: scripts.x has fixed string offsets.
+      %w[src/scripts.def src/scripts.x].each do |script|
+        inreplace script,
+          " | egrep ",
+          "|grep -E "
+      end
+
+      # Kandelo reports 128 MiB of guest memory. XZ preset 9 refuses that
+      # limit, while preset 6 is XZ's own default and fits the machine.
+      inreplace "src/shar-opts.def", "arg-default = 9;", "arg-default = 6;"
+      inreplace "src/shar-opts.def", "default is @code{9}", "default is @code{6}"
+      inreplace "src/shar-opts.c",
+        "#define LEVEL_OF_COMPRESSION_DFT_ARG   ((char const*)9)",
+        "#define LEVEL_OF_COMPRESSION_DFT_ARG   ((char const*)6)"
+      inreplace "src/shar-opts.c", "default is @code{9}", "default is @code{6}"
+      inreplace "doc/invoke-shar.texi", "default is @code{9}", "default is @code{6}"
+      inreplace "doc/sharutils.info", "The default is `9'", "The default is `6'"
+      inreplace "doc/shar.1", 'default is \fB9\fP', 'default is \fB6\fP'
+      inreplace "doc/shar.1",
+        "for this option is:\n.ti +4\n 9\n.sp\nSome compression programs",
+        "for this option is:\n.ti +4\n 6\n.sp\nSome compression programs"
+
+      system kandelo_configure(root),
+        "--prefix=#{GUEST_OPT_PREFIX}",
+        "--disable-compress-link",
+        "--disable-dependency-tracking"
+      system "make", "-j#{ENV.make_jobs}"
+
+      stage = buildpath/"kandelo-stage"
+      system "make", "install", "DESTDIR=#{stage}"
+      staged_prefix = stage/GUEST_OPT_PREFIX.delete_prefix("/")
+      odie "sharutils did not install into the guest opt prefix" unless staged_prefix.directory?
+
+      shar = staged_prefix/"bin/shar"
+      kandelo_fork_instrument(shar)
+      chmod 0755, shar
+      kandelo_validate_wasm_artifact(shar, fork: :required)
+      %w[unshar uuencode uudecode].each do |program|
+        kandelo_validate_wasm_artifact(staged_prefix/"bin"/program, fork: :forbidden)
+      end
+      prefix.install staged_prefix.children
+    end
+  end
+
+  test do
+    %w[shar unshar uuencode uudecode].each do |program|
+      assert_match(/#{program} \(GNU sharutils\) 4\.15\.2/,
+        kandelo_run_wasm(bin/program, ["--version"]))
+      assert_path_exists man1/"#{program}.1"
+    end
+    assert_path_exists info/"sharutils.info"
+    %w[compress compress-dummy].each do |program|
+      refute_path_exists bin/program
+    end
+    manpage = (man1/"shar.1").read
+    assert_match(/for this option is:\n\.ti \+4\n 6\n/, manpage)
+    refute_match(/for this option is:\n\.ti \+4\n 9\n/, manpage)
+    refute_match(/--compress\b/, kandelo_run_wasm(bin/"shar", ["--help"]))
+
+    payload = testpath/"payload.bin"
+    payload.binwrite("Kandelo\0uuencode\n\xFF".b)
+    mounts = { "/work" => testpath }
+    env = { "KERNEL_CWD" => "/work" }
+
+    classic = kandelo_run_wasm(
+      bin/"uuencode", ["payload.bin", "classic.out"],
+      env: env, writable_host_directories: mounts
+    )
+    assert_match(/^begin 644 classic\.out$/, classic)
+    (testpath/"classic.uue").write(classic)
+    assert_empty kandelo_run_wasm(
+      bin/"uudecode", ["classic.uue"],
+      env: env, writable_host_directories: mounts
+    )
+    assert_equal payload.binread, (testpath/"classic.out").binread
+
+    base64 = kandelo_run_wasm(
+      bin/"uuencode", ["--base64", "payload.bin", "base64.out"],
+      env: env, writable_host_directories: mounts
+    )
+    assert_match(/^begin-base64 644 base64\.out$/, base64)
+    (testpath/"base64.uue").write(base64)
+    assert_empty kandelo_run_wasm(
+      bin/"uudecode", ["base64.uue"],
+      env: env, writable_host_directories: mounts
+    )
+    assert_equal payload.binread, (testpath/"base64.out").binread
+
+    coreutils = formula_opt_bin("automattic/kandelo-homebrew/coreutils")
+    shell = formula_opt_bin("automattic/kandelo-homebrew/dash")/"dash"
+    programs = {
+      "/bin/bzip2"    => formula_opt_bin("automattic/kandelo-homebrew/bzip2")/"bzip2",
+      "/bin/chmod"    => coreutils/"chmod",
+      "/bin/grep"     => formula_opt_bin("automattic/kandelo-homebrew/grep")/"grep",
+      "/bin/gzip"     => formula_opt_bin("automattic/kandelo-homebrew/gzip")/"gzip",
+      "/bin/md5sum"   => coreutils/"md5sum",
+      "/bin/mkdir"    => coreutils/"mkdir",
+      "/bin/rm"       => coreutils/"rm",
+      "/bin/sed"      => formula_opt_bin("automattic/kandelo-homebrew/sed")/"sed",
+      "/bin/sh"       => shell,
+      "/bin/touch"    => coreutils/"touch",
+      "/bin/uuencode" => bin/"uuencode",
+      "/bin/uudecode" => bin/"uudecode",
+      "/bin/wc"       => coreutils/"wc",
+      "/bin/xz"       => formula_opt_bin("automattic/kandelo-homebrew/xz")/"xz",
+    }
+    shell_env = env.merge("KERNEL_PATH" => "/bin")
+    {
+      "plain" => "--uuencode",
+      "bzip2" => "--bzip2",
+      "gzip"  => "--gzip",
+      "xz"    => "--compactor=xz",
+    }.each do |label, mode|
+      archive_name = "payload-#{label}.shar"
+      archive = kandelo_run_wasm(
+        bin/"shar", [mode, "--quiet", "payload.bin"],
+        env:                       shell_env,
+        exec_programs:             programs,
+        writable_host_directories: mounts,
+        expected_fork_descendants: 1
+      )
+      assert_match(/md5sum/, archive)
+      assert_match(/wc -c/, archive)
+      assert_match(/\|grep -E /, archive)
+      refute_match(/\begrep\b/, archive)
+      (testpath/archive_name).write(archive)
+
+      unpacked = testpath/"unpacked-#{label}"
+      unpacked.mkpath
+      unshar_output = kandelo_run_wasm(
+        bin/"unshar", ["--directory=/work/#{unpacked.basename}", archive_name],
+        env: shell_env, merge_stderr: true, exec_programs: programs,
+        writable_host_directories: mounts
+      )
+      assert_match(/#{Regexp.escape(archive_name)}:/, unshar_output)
+      refute_match(/not verifying md5sums/i, unshar_output)
+      assert_equal payload.binread, (unpacked/"payload.bin").binread
+    end
+  end
+end
diff --git a/README.md b/README.md
index eb985c2..4c9dc18 100644
--- a/README.md
+++ b/README.md
@@ -64,6 +64,8 @@ Current migration controls and pilots include:
   and optscript interpreter with complete C and C++ workflows.
 - `tar`, the GNU archive creation and extraction CLI.
 - `wget`, GNU HTTP and HTTPS retrieval linked against the tap TLS and compression roots.
+- `coreutils`, the GNU filesystem, text, checksum, and shell utility suite.
+- `sharutils`, GNU shell archives plus the real `uuencode` and `uudecode` tools.
 
 The SDK is not yet a Homebrew dependency. Trusted builds supply an
 `HOMEBREW_KANDELO_ROOT` checkout containing the SDK, sysroot, kernel, and Node