diff --git a/tests/setup/docker-compose-francis.yml b/tests/setup/docker-compose-francis.yml
index 894913dc..7044e898 100644
--- a/tests/setup/docker-compose-francis.yml
+++ b/tests/setup/docker-compose-francis.yml
@@ -32,10 +32,10 @@ services:
       ENCRYPTION_KEY: test-encryption-key
       FILE_BACKEND: ${FILE_BACKEND}
       # The runtime's port is UDP, since WebTransport runs over HTTP/3
-      FRANCIS_HOST: francis-runtime:7400
+      EXPERIMENTAL_FRANCIS_HOST: francis-runtime:7400
       # Must match "bootstrap.hostPSK" in francis-config.yaml
-      FRANCIS_HOST_PSK: e2e-host-bootstrap-psk-0123456789
-      # FRANCIS_CA is intentionally unset, so this exercises the same trust-on-first-use path an operator gets without it
+      EXPERIMENTAL_FRANCIS_HOST_PSK: e2e-host-bootstrap-psk-0123456789
+      # EXPERIMENTAL_FRANCIS_CA is intentionally unset, so this exercises the same trust-on-first-use path an operator gets without it
       # The cluster only exists inside this Compose network for the duration of the tests
       #
       # Peers reach actors placed on this host at ACTORS_HOST, which the runtime hands out, so it has to be the address other containers resolve rather than the default wildcard