There are two kernels in AC: plain kernel and kernel with full grsecurity.

First you should send main kernel pkg and it's modules, and after moving those to updates you can start with grsecurity. (well kernel itself can be sent both).

kernel packages should be sent from LINUX_2_6_16 (you may move AC-branch tag to achieve that) for modules make updates on AC-branch with exception on unionfs where you should update LINUX_2_6_16 branch and move AC-branch tag.

currently the kernel packages are: