diff --git a/WORK-RECORDS.md b/WORK-RECORDS.md
index 070d16e..57e5136 100644
--- a/WORK-RECORDS.md
+++ b/WORK-RECORDS.md
@@ -112,6 +112,7 @@
 | task | KEY-WP-0013-T04 | done | — | workplans/KEY-WP-0013-approval-engine-resource-audience.md |
 | task | KEY-WP-0013-T05 | wait | — | workplans/KEY-WP-0013-approval-engine-resource-audience.md |
 | task | KEY-WP-0013-T06 | done | — | workplans/KEY-WP-0013-approval-engine-resource-audience.md |
+| task | KEY-WP-0013-T07 | done | — | workplans/KEY-WP-0013-approval-engine-resource-audience.md |
 | task | KEY-WP-0014-T01 | done | — | workplans/KEY-WP-0014-native-credential-lane-handoff.md |
 | task | KEY-WP-0014-T02 | done | — | workplans/KEY-WP-0014-native-credential-lane-handoff.md |
 | task | KEY-WP-0014-T03 | done | — | workplans/KEY-WP-0014-native-credential-lane-handoff.md |
diff --git a/workplans/KEY-WP-0013-approval-engine-resource-audience.md b/workplans/KEY-WP-0013-approval-engine-resource-audience.md
index 65c572e..3f43b85 100644
--- a/workplans/KEY-WP-0013-approval-engine-resource-audience.md
+++ b/workplans/KEY-WP-0013-approval-engine-resource-audience.md
@@ -222,6 +222,7 @@ id: KEY-WP-0013-T07
 status: done
 priority: high
 assignee: the-custodian
+state_hub_task_id: "62bc6d8e-dbb2-57b6-a30b-472ffd06b497"
 ```
 
 2026-09-08: T02's actual upstream signed-token issuer gate had no executable