- validate agent, API token, archive before provisioning - auto-build archive via `make build-archive` if missing - add tests and Makefile install target