diff --git a/.planning/phases/03-agent-registry-sse-push/03-VALIDATION.md b/.planning/phases/03-agent-registry-sse-push/03-VALIDATION.md
new file mode 100644
index 00000000..c22372b6
--- /dev/null
+++ b/.planning/phases/03-agent-registry-sse-push/03-VALIDATION.md
@@ -0,0 +1,81 @@
+---
+phase: 3
+slug: agent-registry-sse-push
+status: draft
+nyquist_compliant: false
+wave_0_complete: false
+created: 2026-03-11
+---
+
+# Phase 3 — Validation Strategy
+
+> Per-phase validation contract for feedback sampling during execution.
+
+---
+
+## Test Infrastructure
+
+| Property | Value |
+|----------|-------|
+| **Framework** | JUnit 5 + Spring Boot Test + Testcontainers ClickHouse 25.3 |
+| **Config file** | cameleer3-server-app/pom.xml (Surefire + Failsafe configured) |
+| **Quick run command** | `mvn test -pl cameleer3-server-core -Dtest=AgentRegistryServiceTest` |
+| **Full suite command** | `mvn clean verify` |
+| **Estimated runtime** | ~50 seconds |
+
+---
+
+## Sampling Rate
+
+- **After every task commit:** Run `mvn test -pl cameleer3-server-core,cameleer3-server-app -Dtest="Agent*"`
+- **After every plan wave:** Run `mvn clean verify`
+- **Before `/gsd:verify-work`:** Full suite must be green
+- **Max feedback latency:** 50 seconds
+
+---
+
+## Per-Task Verification Map
+
+| Task ID | Plan | Wave | Requirement | Test Type | Automated Command | File Exists | Status |
+|---------|------|------|-------------|-----------|-------------------|-------------|--------|
+| 03-01-01 | 01 | 1 | AGNT-01 | integration | `mvn test -pl cameleer3-server-app -Dtest=AgentRegistrationControllerIT#registerAgent*` | ❌ W0 | ⬜ pending |
+| 03-01-02 | 01 | 1 | AGNT-02 | unit | `mvn test -pl cameleer3-server-core -Dtest=AgentRegistryServiceTest#lifecycle*` | ❌ W0 | ⬜ pending |
+| 03-01-03 | 01 | 1 | AGNT-03 | integration | `mvn test -pl cameleer3-server-app -Dtest=AgentRegistrationControllerIT#heartbeat*` | ❌ W0 | ⬜ pending |
+| 03-02-01 | 02 | 1 | AGNT-04 | integration | `mvn test -pl cameleer3-server-app -Dtest=AgentSseControllerIT#configUpdate*` | ❌ W0 | ⬜ pending |
+| 03-02-02 | 02 | 1 | AGNT-05 | integration | `mvn test -pl cameleer3-server-app -Dtest=AgentSseControllerIT#deepTrace*` | ❌ W0 | ⬜ pending |
+| 03-02-03 | 02 | 1 | AGNT-06 | integration | `mvn test -pl cameleer3-server-app -Dtest=AgentSseControllerIT#replay*` | ❌ W0 | ⬜ pending |
+| 03-02-04 | 02 | 1 | AGNT-07 | integration | `mvn test -pl cameleer3-server-app -Dtest=AgentSseControllerIT#pingKeepalive*` | ❌ W0 | ⬜ pending |
+
+*Status: ⬜ pending · ✅ green · ❌ red · ⚠️ flaky*
+
+---
+
+## Wave 0 Requirements
+
+- [ ] `AgentRegistryServiceTest.java` — unit test stubs for AGNT-02 (lifecycle transitions), AGNT-03 (heartbeat updates)
+- [ ] `AgentRegistrationControllerIT.java` — integration test stubs for AGNT-01 (registration), AGNT-03 (heartbeat)
+- [ ] `AgentSseControllerIT.java` — integration test stubs for AGNT-04, AGNT-05, AGNT-06, AGNT-07
+- [ ] `AgentCommandControllerIT.java` — integration test stubs for command targeting (single, group, all)
+
+*Existing infrastructure covers test framework and Testcontainers setup.*
+
+---
+
+## Manual-Only Verifications
+
+| Behavior | Requirement | Why Manual | Test Instructions |
+|----------|-------------|------------|-------------------|
+| SSE connection survives proxy/LB | AGNT-07 | Requires real network infrastructure | Deploy behind nginx/HAProxy, verify SSE keepalive and reconnection |
+
+---
+
+## Validation Sign-Off
+
+- [ ] All tasks have `<automated>` verify or Wave 0 dependencies
+- [ ] Sampling continuity: no 3 consecutive tasks without automated verify
+- [ ] Wave 0 covers all MISSING references
+- [ ] No watch-mode flags
+- [ ] Feedback latency < 50s
+- [ ] `nyquist_compliant: true` set in frontmatter
+
+**Approval:** pending