diff --git a/workplans/KEY-WP-0044-audit-correlation-and-intake.md b/workplans/KEY-WP-0044-audit-correlation-and-intake.md index 8bd896e..a45e8ff 100644 --- a/workplans/KEY-WP-0044-audit-correlation-and-intake.md +++ b/workplans/KEY-WP-0044-audit-correlation-and-intake.md @@ -11,6 +11,7 @@ created: "2026-10-27" updated: "2026-10-27" flavor: extension depends_on: [] +state_hub_workstream_id: "7d8c5e7a-0291-58eb-a1cb-284d663468aa" --- Accepted from net-kingdom NK-WP-0055-T11 under the NetKingdom Audit Correlation @@ -25,6 +26,7 @@ credential or changes a live deployment; activation stays owner-run. id: KEY-WP-0044-T01 status: todo priority: high +state_hub_task_id: "f059548e-f6eb-57a9-8ad2-9c7bcf2da2dc" ``` On `/authorize` (including the login, MFA and handoff legs of the same flow) @@ -54,6 +56,7 @@ and without the header. id: KEY-WP-0044-T02 status: todo priority: high +state_hub_task_id: "b126f10a-d301-5512-8447-d1131608e4b5" ``` Close the gaps the intake package lists: emit on `/token` failures @@ -70,6 +73,7 @@ OTP or email on any event. id: KEY-WP-0044-T03 status: wait priority: medium +state_hub_task_id: "721254d8-6b50-575c-9715-feaf2ef7e414" ``` Waits on audit-core admitting `netkingdom.keycape` (AUDIT-WP-0017-T04) and on