Copy the appropriate TOML outside this directory and point CONFIG_FILE at the absolute copy path. See Docker and Compose for mounts, startup, graceful stop and config reload.

File	Mode	Inputs
validate.toml	Single run	/input/anchor.tal
validate-all5.toml	Single run	Five named RIR TALs
daemon.toml	Continuous	/input/anchor.tal
daemon-all5.toml	Continuous	Five named RIR TALs

All examples use text/info diagnostics, require-complete=true, and automatic TA certificate refresh (ta omitted). TAL files are never automatically updated. Uncomment an anchor's ta field to use a fixed certificate. Policy allow-valid-cache permits only a validated cached certificate and marks fallback partial. First automatic use needs reachable TAL URIs; fixed files are not an automatic-cache seed. These examples contain no TALs or certificates.

Container paths differ from native configuration paths. Validate uses /state/repository and /state/repository.ta-cache under the writable /state mount; daemon uses /data/state and /data/state.ta-cache. Existing /state databases need an explicit migration or separate cache mount before switching to these paths.