# Genesis-4 operator onboarding worksheet v1

Download [onboarding-checklist.v1.json](onboarding-checklist.v1.json) and make a private copy for each candidate and release. It is an evidence template, not a certification or transaction tool. Its default `overallStatus` is `NOT_QUALIFIED`; downloading it does not change any gate. Record timestamps, artifact hashes, node identity, transaction IDs and independent reviewers in your own operator record. Do not put private keys, mnemonics, keystore contents or RPC credentials in the worksheet.

## Gate order

1. **Trusted chain anchor:** Obtain the canonical Genesis-4 manifest and network-domain digest through a trusted channel. Authenticate the signed weak-subjectivity checkpoint, signer set and published digest independently, then run the [local checkpoint verifier](CHECKPOINT-VERIFY.md) against that manifest. See [checkpoint runbook](https://github.com/tiagobeltraoacioli-sketch/bloch-sis-pow/blob/main/docs/CHECKPOINT-RUNBOOK.md).
2. **Exact binary:** Retain the published release and activation notice, artifact digest, actual running binary digest, `getbuildinfo` identity and fleet inventory. A source digest alone does not identify the installed artifact. See [opening checklist](https://github.com/tiagobeltraoacioli-sketch/bloch-sis-pow/blob/main/docs/VALIDATOR-OPENING.md).
3. **Funded admission:** Run the [read-only preflight](PREFLIGHT.md) on your own synchronized node with an independently supplied network domain. Check `getvalidatoradmission` at the current head; a gateway or `active: true` alone does not qualify an operator. Verify native suite-1 funding UTXOs, both offline signing roles, fee quote and withdrawal script control. After inclusion, distinguish transaction status from queue and activation with `gettxstatus` and `getvalidatorbykey`. See [funded admission specification](https://github.com/tiagobeltraoacioli-sketch/bloch-sis-pow/blob/main/docs/specs/BLOCH-FUNDED-VALIDATOR-ADMISSION.md).
4. **Signer custody:** Keep the validator keystore, RANDAO seed, funding authority, withdrawal authority and slashing journal under documented controls. Verify restart and duplicate-instance protection on the actual release.
5. **Exit to spendable payout:** Require exact-release mainnet evidence of authenticated exit, the production withdrawal delay, finalized withdrawal and a spendable payout, then a current external-validator opening notice. The source implementation and isolated rehearsals do not substitute for that evidence.
6. **Delegation:** The legacy unfunded Delegate path remains disabled. There is no production self-service delegation flow to activate through this worksheet.

The preflight evidence bundle records selected read-only RPC observations and always marks its manual gate `NOT_VERIFIED`. After running both tools, use the [local evidence assessment](EVIDENCE-ASSESS.md) to check bundle integrity and contradictions between their chain and checkpoint observations. Attach authenticated manifest, checkpoint, binary and lifecycle records separately. If any evidence conflicts or a required RPC method is unavailable, stop and resolve it before any value-bearing action.