diff --git a/WORK-RECORDS.md b/WORK-RECORDS.md
index 01707ca..34d1a4b 100644
--- a/WORK-RECORDS.md
+++ b/WORK-RECORDS.md
@@ -30,6 +30,7 @@
 | workplan | KEY-WP-0018 | finished | — | workplans/KEY-WP-0018-export-completeness-evidence.md |
 | workplan | KEY-WP-0019 | finished | — | workplans/KEY-WP-0019-upstream-provider-token-verification.md |
 | workplan | KEY-WP-0020 | finished | — | workplans/KEY-WP-0020-migration-contract-preservation.md |
+| workplan | KEY-WP-0021 | finished | — | workplans/KEY-WP-0021-snapshot-attribute-validation.md |
 | task | ADHOC-2026-09-05-T01 | done | — | workplans/ADHOC-2026-09-05.md |
 | task | ADHOC-2026-09-07-T01 | done | — | workplans/ADHOC-2026-09-07.md |
 | task | KEY-WP-0001-T01 | done | — | workplans/KEY-WP-0001-keycape-implementation.md |
@@ -127,4 +128,7 @@
 | task | KEY-WP-0020-T01 | done | — | workplans/KEY-WP-0020-migration-contract-preservation.md |
 | task | KEY-WP-0020-T02 | done | — | workplans/KEY-WP-0020-migration-contract-preservation.md |
 | task | KEY-WP-0020-T03 | done | — | workplans/KEY-WP-0020-migration-contract-preservation.md |
+| task | KEY-WP-0021-T01 | done | — | workplans/KEY-WP-0021-snapshot-attribute-validation.md |
+| task | KEY-WP-0021-T02 | done | — | workplans/KEY-WP-0021-snapshot-attribute-validation.md |
+| task | KEY-WP-0021-T03 | done | — | workplans/KEY-WP-0021-snapshot-attribute-validation.md |
 | intake | KEY-IN-0001 | closed | — | intakes/intakes.md |
diff --git a/workplans/KEY-WP-0021-snapshot-attribute-validation.md b/workplans/KEY-WP-0021-snapshot-attribute-validation.md
index 2f93ffe..1f6efeb 100644
--- a/workplans/KEY-WP-0021-snapshot-attribute-validation.md
+++ b/workplans/KEY-WP-0021-snapshot-attribute-validation.md
@@ -9,6 +9,7 @@ owner: claude
 topic_slug: snapshot-attribute-validation
 created: "2026-09-07"
 updated: "2026-09-07"
+state_hub_workstream_id: "733ad1a5-c4d8-5c2f-8608-c51bf1d5b17e"
 ---
 
 Closes gap G06 of `history/2026-09-05-011726-scope-intent-assessment.md`:
@@ -32,6 +33,7 @@ assessment looked at.
 id: KEY-WP-0021-T01
 status: done
 priority: medium
+state_hub_task_id: "e2921983-853c-501b-8dfc-158751dea093"
 ```
 
 `ldapAttributes` is defined by the canonical model as raw attributes *not covered
@@ -61,6 +63,7 @@ plainly that this is not an allow-list and why one cannot be derived.
 id: KEY-WP-0021-T02
 status: done
 priority: medium
+state_hub_task_id: "de4caf0a-39c6-5148-a986-db18a1308505"
 ```
 
 The assessment asks for invalid-snapshot cases proving each stated rule. Add one
@@ -80,6 +83,7 @@ early fails four of the five tests.
 id: KEY-WP-0021-T03
 status: done
 priority: medium
+state_hub_task_id: "8a48c6cc-1e7e-5fd4-abfa-2b893c3d400d"
 ```
 
 Update `SCOPE.md` and G06's status. State what the rule now enforces and, just as