diff --git a/WORK-RECORDS.md b/WORK-RECORDS.md
index 34d1a4b..5ccc18b 100644
--- a/WORK-RECORDS.md
+++ b/WORK-RECORDS.md
@@ -31,6 +31,7 @@
 | workplan | KEY-WP-0019 | finished | — | workplans/KEY-WP-0019-upstream-provider-token-verification.md |
 | workplan | KEY-WP-0020 | finished | — | workplans/KEY-WP-0020-migration-contract-preservation.md |
 | workplan | KEY-WP-0021 | finished | — | workplans/KEY-WP-0021-snapshot-attribute-validation.md |
+| workplan | KEY-WP-0022 | finished | — | workplans/KEY-WP-0022-replacement-harness-and-external-conformance.md |
 | task | ADHOC-2026-09-05-T01 | done | — | workplans/ADHOC-2026-09-05.md |
 | task | ADHOC-2026-09-07-T01 | done | — | workplans/ADHOC-2026-09-07.md |
 | task | KEY-WP-0001-T01 | done | — | workplans/KEY-WP-0001-keycape-implementation.md |
@@ -131,4 +132,9 @@
 | task | KEY-WP-0021-T01 | done | — | workplans/KEY-WP-0021-snapshot-attribute-validation.md |
 | task | KEY-WP-0021-T02 | done | — | workplans/KEY-WP-0021-snapshot-attribute-validation.md |
 | task | KEY-WP-0021-T03 | done | — | workplans/KEY-WP-0021-snapshot-attribute-validation.md |
+| task | KEY-WP-0022-T01 | done | — | workplans/KEY-WP-0022-replacement-harness-and-external-conformance.md |
+| task | KEY-WP-0022-T02 | done | — | workplans/KEY-WP-0022-replacement-harness-and-external-conformance.md |
+| task | KEY-WP-0022-T03 | done | — | workplans/KEY-WP-0022-replacement-harness-and-external-conformance.md |
+| task | KEY-WP-0022-T04 | done | — | workplans/KEY-WP-0022-replacement-harness-and-external-conformance.md |
+| task | KEY-WP-0022-T05 | done | — | workplans/KEY-WP-0022-replacement-harness-and-external-conformance.md |
 | intake | KEY-IN-0001 | closed | — | intakes/intakes.md |
diff --git a/workplans/KEY-WP-0022-replacement-harness-and-external-conformance.md b/workplans/KEY-WP-0022-replacement-harness-and-external-conformance.md
index ec7736d..7c69629 100644
--- a/workplans/KEY-WP-0022-replacement-harness-and-external-conformance.md
+++ b/workplans/KEY-WP-0022-replacement-harness-and-external-conformance.md
@@ -9,6 +9,7 @@ owner: claude
 topic_slug: replacement-harness-and-external-conformance
 created: "2026-09-07"
 updated: "2026-09-07"
+state_hub_workstream_id: "94d74b17-1b2f-57dd-b6c3-50f10a7dccd9"
 ---
 
 Closes the runnable half of gap G04 of
@@ -30,6 +31,7 @@ is worse than a missing one.
 id: KEY-WP-0022-T01
 status: done
 priority: high
+state_hub_task_id: "1d552328-e75b-57fd-83bc-e469ae46b397"
 ```
 
 Fix the binary paths, the `--basedn` flag, and the Go invocation so the scripts
@@ -49,6 +51,7 @@ genuinely differ), and the same module-relative test invocation.
 id: KEY-WP-0022-T02
 status: done
 priority: high
+state_hub_task_id: "06f34e8b-f3d9-53ed-95c5-02e5063774a0"
 ```
 
 Provide `docker-compose.scenario-b.yml` (Keycloak over the migrated realm) and
@@ -66,6 +69,7 @@ started for real; Scenario C's stack has not been run.
 id: KEY-WP-0022-T03
 status: done
 priority: high
+state_hub_task_id: "d837730d-e9d0-5adb-9dda-ffc47661fca3"
 ```
 
 Add a suite that reads `KEYCAPE_TEST_ISSUER` and exercises that issuer over HTTP:
@@ -89,6 +93,7 @@ token verifies against the published keys and carries a matching issuer.
 id: KEY-WP-0022-T04
 status: done
 priority: high
+state_hub_task_id: "cb4d8af7-76a4-50b8-bee5-eb1c52c2f894"
 ```
 
 Run the new suite against an actual Keycloak instance, not only against KeyCape,
@@ -118,6 +123,7 @@ yet against both sides of the swap.
 id: KEY-WP-0022-T05
 status: done
 priority: medium
+state_hub_task_id: "2cb63801-8182-5c71-ab8d-9a1c377f418c"
 ```
 
 Update `SCOPE.md` and G04's status with what the harness now does and what