diff --git a/workplans/NK-WP-0048-security-case-types.md b/workplans/NK-WP-0048-security-case-types.md
index 7ca0237..8d38b9a 100644
--- a/workplans/NK-WP-0048-security-case-types.md
+++ b/workplans/NK-WP-0048-security-case-types.md
@@ -754,6 +754,7 @@ supplied by this task.
 id: NK-WP-0048-T17
 status: done
 priority: high
+state_hub_task_id: "8c3e4baa-a218-5996-af9e-fe1153a46dac"
 ```
 
 Completed 2026-10-16, isolated artifact/source fixture proof only. Built the
@@ -791,6 +792,7 @@ registration procedure remains unexercised.
 id: NK-WP-0048-T18
 status: done
 priority: high
+state_hub_task_id: "9c45da71-fb4c-5f20-9065-90f448f37c64"
 ```
 
 Completed 2026-10-16, isolated source correction and real-artifact fixture proof
@@ -814,3 +816,12 @@ source-composition pins and requires their separate review/admission. An absolut
 path is not immutable custody and does not eliminate file replacement races;
 T16 retains native executable storage/custody and callback/type admission.
 No production configuration, credentials or cluster mutation was used.
+
+Source integration and publication: `916ba4b33e03179274d03b78bd898a4843e8653f`, following independent
+Custodian source review in browser-checker-environment-r2/coordinator-review.json.
+The ordinary protected projection pass assigned T17/T18 UUIDs with zero failures
+and zero automation errors; generated-only brief commit refusal is retained.
+The exact prior staged/working brief bytes were restored. Final source/publication/
+projection evidence is retained in Custodian browser-checker-environment-r2/
+canonical-integration.json. These source receipts do not admit native executable
+custody, owner callbacks, acknowledged type changes or browser identities.