From b8dda4115a969b5a635e04768338b8e3a8963e95 Mon Sep 17 00:00:00 2001
From: repo-manager <repo-manager@local>
Date: Tue, 1 Sep 2026 01:36:20 +0200
Subject: [PATCH] repo.work.assign_missing_identifiers

source: repo-manager
reason: deterministic projection registration

Assistant: codex
Assistant-Model: gpt-5.6-sol
Assistant-Session: 01a058f3-8ba0-7692-a042-9a870fc3d663
---
 .../KEY-WP-0012-userinfo-canonical-subject-resolution.md      | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/workplans/KEY-WP-0012-userinfo-canonical-subject-resolution.md b/workplans/KEY-WP-0012-userinfo-canonical-subject-resolution.md
index 37d4ac4..0f3deb6 100644
--- a/workplans/KEY-WP-0012-userinfo-canonical-subject-resolution.md
+++ b/workplans/KEY-WP-0012-userinfo-canonical-subject-resolution.md
@@ -9,6 +9,7 @@ owner: codex
 topic_slug: userinfo-canonical-subject-resolution
 created: "2026-08-31"
 updated: "2026-09-01"
+state_hub_workstream_id: "2aca83d8-4e80-52c6-8929-f1e957576b47"
 ---
 
 ## Repair subject lookup
@@ -17,6 +18,7 @@ updated: "2026-09-01"
 id: KEY-WP-0012-T01
 status: done
 priority: high
+state_hub_task_id: "bc1ee2c7-a321-5914-96d1-9cb871f0ee1b"
 ```
 
 Resolve the canonical LDAP-DN `sub` emitted by the token endpoint without
@@ -29,6 +31,7 @@ semantics and verify any `preferred_username` lookup against the canonical ID.
 id: KEY-WP-0012-T02
 status: done
 priority: high
+state_hub_task_id: "7073cc30-a518-5c27-acaf-1a323fd981c6"
 ```
 
 Cover canonical-ID, legacy username-sub, missing subject, and suspended-user
@@ -40,6 +43,7 @@ behavior. Run the KeyCape test suite and image build checks.
 id: KEY-WP-0012-T03
 status: done
 priority: high
+state_hub_task_id: "571c5237-93fa-5c61-87af-974e02fd8929"
 ```
 
 Publish and deploy the corrected KeyCape image, prove `/userinfo` accepts a