diff --git a/WORK-RECORDS.md b/WORK-RECORDS.md
index 7371520..75c5fad 100644
--- a/WORK-RECORDS.md
+++ b/WORK-RECORDS.md
@@ -129,7 +129,7 @@
 | task | FLEX-WP-0020-T11 | wait | — | workplans/FLEX-WP-0020-repository-identity-migration.md |
 | task | FLEX-WP-0021-T01 | done | — | workplans/FLEX-WP-0021-secrets-engine-consumer-policy-gate.md |
 | task | FLEX-WP-0021-T02 | done | — | workplans/FLEX-WP-0021-secrets-engine-consumer-policy-gate.md |
-| task | FLEX-WP-0021-T03 | progress | — | workplans/FLEX-WP-0021-secrets-engine-consumer-policy-gate.md |
+| task | FLEX-WP-0021-T03 | done | — | workplans/FLEX-WP-0021-secrets-engine-consumer-policy-gate.md |
 | task | FLEX-WP-0021-T04 | wait | — | workplans/FLEX-WP-0021-secrets-engine-consumer-policy-gate.md |
 | task | FLEX-WP-0021-T05 | wait | — | workplans/FLEX-WP-0021-secrets-engine-consumer-policy-gate.md |
 | intake | FLEX-IN-0001 | closed | — | intakes/intakes.md |
@@ -140,3 +140,4 @@
 | decision | FLEX-DEC-2026-004 | resolved | — | decisions/decisions.md |
 | decision | FLEX-DEC-2026-005 | resolved | — | decisions/decisions.md |
 | decision | FLEX-DEC-2026-006 | resolved | — | decisions/decisions.md |
+| decision | FLEX-DEC-2026-007 | resolved | — | decisions/decisions.md |
diff --git a/decisions/decisions.md b/decisions/decisions.md
index dd8c6a5..ab20e0b 100644
--- a/decisions/decisions.md
+++ b/decisions/decisions.md
@@ -912,6 +912,7 @@ rationale: 'secrets-engine found that an approval pdp_digest recorded at issue t
   on a claim-bearing request and agree on a claim-free one.'
 created: '2026-09-06T12:52:06.960329Z'
 updated: '2026-09-06T12:52:06.960329Z'
+state_hub_decision_id: "4f0a0de3-1b21-48d1-b157-53bc1f6d03d8"
 ```
 
 ## Context