diff --git a/workplans/KEY-WP-0005-iam-profile-core-claims.md b/workplans/KEY-WP-0005-iam-profile-core-claims.md
index 5a3c1cd..696a385 100644
--- a/workplans/KEY-WP-0005-iam-profile-core-claims.md
+++ b/workplans/KEY-WP-0005-iam-profile-core-claims.md
@@ -9,6 +9,7 @@ owner: codex
 topic_slug: netkingdom
 created: "2026-07-23"
 updated: "2026-07-23"
+state_hub_workstream_id: "74ac0d31-b86e-449d-89b2-4e15263bf050"
 ---
 
 # IAM Profile core claims: tenant, principal_type, groups, roles, assurance, tenant_roles
@@ -46,6 +47,7 @@ correct `tenant:friendly:binky` token at all).
 id: KEY-WP-0005-T01
 status: todo
 priority: high
+state_hub_task_id: "66107caf-ba26-4291-bb09-1f9e58275505"
 ```
 
 Bring `token.go`'s claim assembly up to `iam-profile_v0.3.md`'s Core Claims
@@ -75,6 +77,7 @@ these claims for both human and service token issuance paths.
 id: KEY-WP-0005-T02
 status: todo
 priority: high
+state_hub_task_id: "1b8f44b4-2763-4d5a-a3eb-1c2b9a25dd15"
 ```
 
 At token-issuance time, call `tenant-engine`'s cache-read endpoint
@@ -104,6 +107,7 @@ correct when reachable, for a tenant with known role grants.
 id: KEY-WP-0005-T03
 status: todo
 priority: low
+state_hub_task_id: "34555bf7-0f18-4dac-ade2-6ff3738f353f"
 ```
 
 Confirm T01–T02 done; conformance suite green for both tasks together.