diff --git a/workplans/NK-WP-0048-security-case-types.md b/workplans/NK-WP-0048-security-case-types.md
index 66a40fc..339a65c 100644
--- a/workplans/NK-WP-0048-security-case-types.md
+++ b/workplans/NK-WP-0048-security-case-types.md
@@ -840,6 +840,7 @@ custody, owner callbacks, acknowledged type changes or browser identities.
 id: NK-WP-0048-T19
 status: done
 priority: high
+state_hub_task_id: "f50fdcd1-00be-5c3c-be0c-345aa2126032"
 ```
 
 Completed 2026-10-16, independently reviewed source implementation and synthetic
@@ -869,3 +870,13 @@ acknowledgment, credential access, consumer sign-in or rollback acceptance.
 Executable memfds, Linux seals and usable procfs are explicit runtime dependencies
 and still require native admission. This is an extracted source outcome from
 T16, not completion of T16; T12/T14/T15 and all external-owner gates remain open.
+
+
+Publication verified by the coordinator after the source worker usage limit:
+`8790dd18ae83c4651ef3d1d923312a118a5b436b` is the actual remote main revision.
+All five canonical source hashes match the reviewed packet. Normal synchronization
+completed with zero failures/automation errors; all 19 task statuses match the
+projection. T19's assigned UUID is retained. The original staged and working brief
+bytes were restored and independently compared. The exact source, projection and
+publication checks are in Custodian browser-resume-r1/canonical-integration.json.
+Native acceptance remains open under T16 and the other named owner tasks.