chore(registrar): assign State Hub identifiers

Assistant: codex
Assistant-Model: gpt-5.6-sol
Assistant-Session: 01a02929-244b-7391-b933-c04010e8eedb

workplans/NK-WP-0033-keycape-secret-exposure-rotation.md

@@ -14,6 +14,7 @@ origin: routed
 origin_ref: "State Hub message 8cc44a39-683c-4fab-80dd-b2275d0728e0"
 related:
   - NK-WP-0032
+state_hub_workstream_id: "63665674-6880-593e-96e6-bab3211b1352"
 ---
 
 # NK-WP-0033 — KeyCape credential exposure containment and rotation
@@ -35,6 +36,7 @@ conditions, and the authority stated by the owning execution path.
 id: NK-WP-0033-T01
 status: done
 priority: high
+state_hub_task_id: "28a655da-7cd6-58e2-8ca8-64d192de63a6"
 ```
 
 Mark every credential class in the rendered bundle exposed, stop further
@@ -54,6 +56,7 @@ or copied.
 id: NK-WP-0033-T02
 status: progress
 priority: high
+state_hub_task_id: "c5ca817c-d601-5172-a106-1546c0743635"
 ```
 
 KeyCape and railiance-platform must name the authoritative provider, custody,
@@ -79,6 +82,7 @@ unrelated routes do not authorize execution.
 id: NK-WP-0033-T03
 status: wait
 priority: high
+state_hub_task_id: "f0f6d6c3-9c45-56b7-9fd6-52fb0ea9054a"
 ```
 
 After T02 review, implement or select an owner-controlled path that receives
@@ -98,6 +102,7 @@ reviewed for this incident.
 id: NK-WP-0033-T04
 status: wait
 priority: high
+state_hub_task_id: "751cca48-2bc9-5d44-80a0-60478717e99e"
 ```
 
 Under the separately approved authority/window, replace the signing material,
@@ -112,6 +117,7 @@ evidence. This task is not authorized until T02 and T03 are done.
 id: NK-WP-0033-T05
 status: wait
 priority: high
+state_hub_task_id: "41e55d5c-ae28-5ee2-be25-b9a3758428f7"
 ```
 
 Record only sanitized identifiers, public-key fingerprints, revisions,