diff --git a/Infra-Network/SPEC-055-PROXMOX-CF-TUNNEL-ACCESS-PLAN.md b/Infra-Network/SPEC-055-PROXMOX-CF-TUNNEL-ACCESS-PLAN.md
index 2800a0a..d7e852c 100644
--- a/Infra-Network/SPEC-055-PROXMOX-CF-TUNNEL-ACCESS-PLAN.md
+++ b/Infra-Network/SPEC-055-PROXMOX-CF-TUNNEL-ACCESS-PLAN.md
@@ -137,6 +137,16 @@ DNS actual (2026-09-11):
 
 ---
 
+## Checklist Roger (antes de executar)
+
+- [ ] Escolher hostname (`pve.itecnologys.com` / `proxmox-big1…` / forçar `big1…` / `proxmox…`)  
+- [x] Email Access: **`admin@itecnologys.com`**  
+- [ ] Token CF Tunnel+Access **ou** install token do connector  
+- [ ] Origin `http://127.0.0.1:8006` vs HTTPS + noTLSVerify  
+- [ ] OK explícito para implementar  
+
+---
+
 ## Fora de âmbito / fase 2
 
 - pfSense via Tunnel (`firewall-admin…`) — nova SPEC