diff --git a/WORK-RECORDS.md b/WORK-RECORDS.md
index 5508883..809ea16 100644
--- a/WORK-RECORDS.md
+++ b/WORK-RECORDS.md
@@ -15,6 +15,7 @@
 | workplan | EMAIL-WP-0005 | finished | — | workplans/EMAIL-WP-0005-test-mailbox-harness.md |
 | workplan | EMAIL-WP-0006 | finished | — | workplans/EMAIL-WP-0006-verification-retry-safety.md |
 | workplan | EMAIL-WP-0007 | active | — | workplans/EMAIL-WP-0007-ledger-backup-recovery.md |
+| workplan | EMAIL-WP-0008 | active | — | workplans/EMAIL-WP-0008-scoped-transactional-callers.md |
 | task | EMAIL-WP-0001-T01 | done | — | workplans/EMAIL-WP-0001-repo-onboarding.md |
 | task | EMAIL-WP-0001-T02 | done | — | workplans/EMAIL-WP-0001-repo-onboarding.md |
 | task | EMAIL-WP-0001-T03 | done | — | workplans/EMAIL-WP-0001-repo-onboarding.md |
@@ -56,3 +57,6 @@
 | task | EMAIL-WP-0007-T02 | done | — | workplans/EMAIL-WP-0007-ledger-backup-recovery.md |
 | task | EMAIL-WP-0007-T03 | wait | — | workplans/EMAIL-WP-0007-ledger-backup-recovery.md |
 | task | EMAIL-WP-0007-T04 | wait | — | workplans/EMAIL-WP-0007-ledger-backup-recovery.md |
+| task | EMAIL-WP-0008-T01 | done | — | workplans/EMAIL-WP-0008-scoped-transactional-callers.md |
+| task | EMAIL-WP-0008-T02 | done | — | workplans/EMAIL-WP-0008-scoped-transactional-callers.md |
+| task | EMAIL-WP-0008-T03 | wait | — | workplans/EMAIL-WP-0008-scoped-transactional-callers.md |
diff --git a/workplans/EMAIL-WP-0008-scoped-transactional-callers.md b/workplans/EMAIL-WP-0008-scoped-transactional-callers.md
index 050eb30..454e311 100644
--- a/workplans/EMAIL-WP-0008-scoped-transactional-callers.md
+++ b/workplans/EMAIL-WP-0008-scoped-transactional-callers.md
@@ -11,6 +11,7 @@ created: "2026-10-08"
 updated: "2026-10-08"
 origin: residual
 origin_ref: CSOC-WP-0010
+state_hub_workstream_id: "3a0f264d-e441-5b12-964e-dab8fe5b3828"
 ---
 
 CSOC-WP-0010-T04 needs independent caller credentials, bounded template/tenant
@@ -23,6 +24,7 @@ source and its admission; current live single-caller SMTP remains unchanged.
 id: EMAIL-WP-0008-T01
 status: done
 priority: high
+state_hub_task_id: "3f63b288-b2ea-506e-ba86-e7fa5778abb1"
 ```
 
 Opt-in read-only policy/token-file loader, fixed operation/template/binding
@@ -39,6 +41,7 @@ Explicit original-caller legacy adoption preserves accepted evidence.
 id: EMAIL-WP-0008-T02
 status: done
 priority: high
+state_hub_task_id: "88bd986d-6030-59ce-a0e2-74cdad5266e7"
 ```
 
 Synthetic tests cover cross-caller handle denial without mutation, scope changes,
@@ -58,6 +61,7 @@ status: wait
 priority: high
 needs_human: true
 intervention_note: "Actual callers/scopes/quotas and separate token custody, platform sender/reply/bounce ownership, schema rollout/rollback and independent ledger recovery admission remain unapproved; source tests do not activate them."
+state_hub_task_id: "9b4c7260-a6bf-54f9-82f8-2e98c368d294"
 ```
 
 Retain this live admission record before any completion. Choose real binding and