diff --git a/workplans/NK-WP-0036-restore-user-portal-client-registration.md b/workplans/NK-WP-0036-restore-user-portal-client-registration.md
index 6cf33f2..b1e550b 100644
--- a/workplans/NK-WP-0036-restore-user-portal-client-registration.md
+++ b/workplans/NK-WP-0036-restore-user-portal-client-registration.md
@@ -117,6 +117,7 @@ status: wait
 priority: high
 needs_human: true
 intervention_note: "LLDAP rejects the provisioner's current admin login with 401 after reload. Prepared consumer-only reconciliation requires explicit operator acceptance and the current working LLDAP admin credential via hidden terminal input; never send it in chat."
+state_hub_task_id: "3497d77a-1dc2-5fe6-8784-33949321f556"
 ```
 
 A subsequent native Create login fails before directory identity creation, at
@@ -139,6 +140,7 @@ to export another live Secret. Retain NK-WP-0033's separate incident residuals.
 id: NK-WP-0036-T05
 status: todo
 priority: high
+state_hub_task_id: "46d33ab6-d76b-537f-8d60-32c4451675b5"
 ```
 
 Cover the real provisioner-to-directory contract in a contained preflight,