Follower configuration and anchor patch at the live revision: registries/hibrid-1.properties (SLH-DSA public keys), the five properties a follower needs past blocks 17,047,600 and 17,225,968, 0003 regenerated from the staged overlay on d2032017 (169 files; applies with 0001/0004/0005 in run-node order, tree equals anchor/); the from-genesis import proof is stated as not yet repeated

RUN-A-NODE.md

@@ -142,10 +142,14 @@ controls run in both directions (641 tests, 0 failures).
 Measured 2026-08-15: on a pristine `d2032017` checkout, `git apply` (no flags) accepted
 `0001`, `0003` and `0004` in that order, and `./gradlew --no-daemon installDist
 -x spotlessJavaCheck -x test` exited 0 on JDK 21, producing
-`besu/v26.8-develop-d203201/linux-x86_64/openjdk-java-21`. That proves the recipe builds.
+`besu/v26.8-develop-d203201/linux-x86_64/openjdk-java-21`. That proves the recipe builds. Measured again on 2026-09-05 with the regenerated `0003` (169 files: 30 upstream files modified, 139 new, among them the 22 of the SLH-DSA engine): on a pristine `d2032017` checkout `git apply --check` accepted `0001`, `0003`, `0004` and `0005` in the order `run-node.sh` uses, and the patched tree equals `anchor/` file for file. The `installDist` build and the from-genesis import were NOT repeated that day; see the revision note below.
 The import proof above, measured 2026-08-16, proves the build follows the live chain from genesis
 to the tip. The proof is repeated, not assumed: see `IMPORT-PROOF-STARE-2026-08-15.md` for the
-measured heights of each run.
+measured heights of each run. **Revision note, 2026-09-05:** the anchor patch and the configuration
+below were updated for the hybrid certificate and the interval schedule; the from-genesis import proof
+has NOT yet been repeated against this revision (the last measured run is the one above, on the
+previous revision). What is measured for this revision is that the same code follows the live tip on
+the network's reading nodes, and validates every hybrid anchor there, since 2026-09-05.
 
 ---
 
@@ -154,7 +158,12 @@ measured heights of each run.
 The Aere fork reads its per-node configuration from JVM system properties passed through the
 `BESU_OPTS` environment variable, not from the genesis file. `run-node.sh` sets these for you; this
 is what it sets, and what a manual operator must export before the `besu` command below, or the node
-will refuse the first anchor at block 13,014,000.
+will refuse the first anchor at block 13,014,000. Revised 2026-09-05: the five properties added that
+day are the ones without which a node stops at block 17,047,600 (the first hybrid, v2 certificate) or at
+the first anchor after 17,225,968 (the interval change): `anchorV2Block`, `schemeSchedule`,
+`hybridRegistry` (the SLH-DSA-SHA2-128s public keys, `registries/hibrid-1.properties`),
+`anchorIntervalSchedule`, and the two dated steps in `anchorMinSeals` (see `anchor/README.md`, scope
+item 3). The set below is the one the network's own public reading node runs with, measured that day.
 
 ```bash
 REG=/path/to/aere-node/registries
@@ -164,9 +173,13 @@ export BESU_OPTS="\
 -Daere.pq.chainId=2800 \
 -Daere.pq.anchorBlock=13014000 \
 -Daere.pq.anchorInterval=32 \
+-Daere.pq.anchorIntervalSchedule=17225968:128 \
 -Daere.pq.anchor.maxSeals=9 \
--Daere.pq.anchorMinSeals=13014000:0,13034000:3,14961456:6 \
+-Daere.pq.anchorMinSeals=13014000:0,13034000:3,14961456:6,17102384:0,17102416:6 \
 -Daere.pq.anchor.minSealsCeiling=1 \
+-Daere.pq.anchorV2Block=17047600 \
+-Daere.pq.schemeSchedule=17047568:falcon-512+slh-dsa-sha2-128s \
+-Daere.pq.hybridRegistry=$REG/hibrid-1.properties \
 -Daere.falcon.anchor.address=0x5214F0e53899Dad805ef3AdF0624F5e49d2a5EB5 \
 -Daere.falcon.anchor.block=13889290 \
 -Daere.falcon.manifest=$REG/manifest-13600000.json \

registries/README.md

@@ -1,4 +1,4 @@
-# Falcon validator registries for chain 2800
+# Falcon and SLH-DSA validator registries for chain 2800
 
 These files are the **public** Falcon-512 validator registries that a node must hold to validate the
 post-quantum certificate anchor (see `../anchor/README.md` and `../RUN-A-NODE.md`). Without them a
@@ -29,6 +29,7 @@ are mode 600 and stay on the validators. The repository's secret gate passes on
 | `manifest-13014000.json` | 13,014,000 | 7 | the registry in force from the first anchor; carried in `registry.history` |
 | `registru-2800-v2-13600000.properties` | 13,600,000 | 9 | the nine-validator registry from the set expansion; carried in `registry.history` |
 | `manifest-13600000.json` | 13,600,000 | 9 | the head registry, passed as `aere.falcon.manifest` |
+| `hibrid-1.properties` | 17,047,568 | 9 | the SLH-DSA-SHA2-128s public keys of the same nine validators (`formatVersion=hybrid-1`), passed as `aere.pq.hybridRegistry`; needed from the first hybrid anchor, block 17,047,600 |
 
 `SHA256SUMS` carries the digests. Verify after copying:
 

registries/SHA256SUMS

@@ -1,3 +1,4 @@
 006b1b3fb814ed84622539160956263faca7c0b76585c22f2e8acb926c0bcb7f *manifest-13014000.json
 23736b7d4ba1d3213496f8b5a5f756d5c958b08efebdeb1329b24d7dfa45fb6e *manifest-13600000.json
 c9a215d294e106f69fb2f16e3af21f9787523969e4b7260a3098f4b2cf458059 *registru-2800-v2-13600000.properties
+f155bd46958cd533e710f79aac4fd96549d7b6ca54df17df71a4e5d876012c59 *hibrid-1.properties

registries/hibrid-1.properties

@@ -0,0 +1,21 @@
+formatVersion=hybrid-1
+chainId=2800
+count=9
+0.addr=0x4bf6f91d84b37454544279cba152581ed6820044
+0.key.slh-dsa-sha2-128s=0x5a223b6ccd6991221265ed715c0d0656a5f14aa3820624d21f044a9fe480f427
+1.addr=0x5f50fc4e1b129bbd5e6e9f80c57680b0b4a86eb0
+1.key.slh-dsa-sha2-128s=0x73e76257c40876cd9fa2d08060b1be9a8ed216cee06daa351f35ff6d985c34db
+2.addr=0x97473985d04723299559f49b856effb47d7abfad
+2.key.slh-dsa-sha2-128s=0x30faf2e4626a0fffd74369c1c1f1c9ef795526677dc9b1a53807f7d2d255a44a
+3.addr=0xb5e768cb3117ea25175f51aa956b48691025c2a8
+3.key.slh-dsa-sha2-128s=0xf04aca3422194bae6cf9cecf8214215f4c72b5728479f4789fc0bf9a47bcefa7
+4.addr=0xc3314fd768bb68b986e80c0a14175f6f72630d7a
+4.key.slh-dsa-sha2-128s=0xffc690bb8feb463cc359c0dd64f017f6af77e3fdca17864d562010a1bd058687
+5.addr=0xe13aa491abbc1252dd714e7ca0e55717a2143eaf
+5.key.slh-dsa-sha2-128s=0xe4e78e33faf1538665753136783ce1cfcd7ac20d29473b7079905d2859bccf4e
+6.addr=0xf73bbbd26a82dbc769066550d8d4585eab2fc00d
+6.key.slh-dsa-sha2-128s=0x4d64e902943d4a78d5dec0ab0f9ab7271ca34b1bb94d84b6e867698b33e03c0f
+7.addr=0xdf09b32c761620c5be77da398b97a64f03c3980c
+7.key.slh-dsa-sha2-128s=0x4680b2ae637453f4d28a4092489884f89488fa0df7a95a9f68aa3aaa22112f86
+8.addr=0x1bd5514286f5602a6762b0075266379d29af1c9d
+8.key.slh-dsa-sha2-128s=0x9de25aee7a187dc2d82c60792f70b6ad71a90d744f89b0baf70639af4c682a20