diff --git a/WORK-RECORDS.md b/WORK-RECORDS.md
index 96f2b82..9bd27c1 100644
--- a/WORK-RECORDS.md
+++ b/WORK-RECORDS.md
@@ -20,6 +20,7 @@
 | workplan | FLEX-WP-0010 | finished | — | workplans/FLEX-WP-0010-tenant-lifecycle-policy-actions.md |
 | workplan | FLEX-WP-0011 | active | — | workplans/FLEX-WP-0011-railiance-staged-promotion-overlay.md |
 | workplan | FLEX-WP-0012 | proposed | — | workplans/FLEX-WP-0012-credential-grant-authorization-surface.md |
+| workplan | FLEX-WP-0013 | finished | — | workplans/FLEX-WP-0013-restore-seven-action-tenant-engine-pin.md |
 | task | FLEX-WP-0001-T001 | done | — | workplans/FLEX-WP-0001-repo-intent-and-architecture-baseline.md |
 | task | FLEX-WP-0001-T002 | done | — | workplans/FLEX-WP-0001-repo-intent-and-architecture-baseline.md |
 | task | FLEX-WP-0001-T003 | done | — | workplans/FLEX-WP-0001-repo-intent-and-architecture-baseline.md |
@@ -79,3 +80,6 @@
 | task | FLEX-WP-0012-T02 | todo | — | workplans/FLEX-WP-0012-credential-grant-authorization-surface.md |
 | task | FLEX-WP-0012-T03 | todo | — | workplans/FLEX-WP-0012-credential-grant-authorization-surface.md |
 | task | FLEX-WP-0012-T04 | todo | — | workplans/FLEX-WP-0012-credential-grant-authorization-surface.md |
+| task | FLEX-WP-0013-T01 | done | — | workplans/FLEX-WP-0013-restore-seven-action-tenant-engine-pin.md |
+| task | FLEX-WP-0013-T02 | done | — | workplans/FLEX-WP-0013-restore-seven-action-tenant-engine-pin.md |
+| task | FLEX-WP-0013-T03 | done | — | workplans/FLEX-WP-0013-restore-seven-action-tenant-engine-pin.md |
diff --git a/workplans/FLEX-WP-0013-restore-seven-action-tenant-engine-pin.md b/workplans/FLEX-WP-0013-restore-seven-action-tenant-engine-pin.md
index d90f248..e46cc75 100644
--- a/workplans/FLEX-WP-0013-restore-seven-action-tenant-engine-pin.md
+++ b/workplans/FLEX-WP-0013-restore-seven-action-tenant-engine-pin.md
@@ -17,6 +17,7 @@ related_workplans:
   - TEN-WP-0006
 created: "2026-08-16"
 updated: "2026-08-16"
+state_hub_workstream_id: "41df7845-a144-420d-9852-adabde0949b3"
 ---
 
 # FLEX-WP-0013 - Restore the seven-action tenant-engine policy pin
@@ -69,6 +70,7 @@ Do not move `flex-auth-user-engine`.
 id: FLEX-WP-0013-T01
 status: done
 priority: high
+state_hub_task_id: "22db4198-b9c3-4ebf-975a-5c44c6a75928"
 ```
 
 Set the tenant-engine digest to `9320df39` in:
@@ -94,6 +96,7 @@ that digest as live and `c25fc34a` as rollback.
 id: FLEX-WP-0013-T02
 status: done
 priority: high
+state_hub_task_id: "e5e76f15-369a-4573-8095-46ba05cd6b14"
 ```
 
 `kubectl apply -f deploy/flex-auth-tenant-engine.yaml` against railiance01,
@@ -142,6 +145,7 @@ deploy/flex-auth-tenant-engine.yaml` reused ReplicaSet
 id: FLEX-WP-0013-T03
 status: done
 priority: medium
+state_hub_task_id: "df616e44-cfea-4811-a986-90ea0f72b68b"
 ```
 
 Notify `tenant-engine` that TEN-WP-0005-T05 authority is restored, naming