new hosts vps

specs/003-vps-image-migration/quickstart.md

@@ -12,3 +12,17 @@ Provision a Linode-compatible VPS image, bootstrap secrets securely, and enable
 4. Enroll the host by adding its public key as a secrets recipient and re-encrypt required secrets.
 5. Trigger a rebuild from an explicitly authorized operator machine to apply secrets and confirm core services start successfully.
 6. Validate the remote rebuild workflow from an explicitly authorized operator machine.
+
+## Validation Checklist
+
+- vps boots with network connectivity and remote access.
+- Secrets are available after enrollment and follow-up deployment.
+- Remote rebuild completes from an explicitly authorized operator machine.
+- Existing host and image builds complete after migration.
+
+## Validation Log
+
+- vps connectivity: pending
+- secrets enrollment: pending
+- remote rebuild: pending
+- existing host/image builds: pending