derive state hub identifiers

Assistant: codex
Assistant-Model: gpt-5.6-sol
Assistant-Session: 01a053ff-1d6f-7fe2-ac1c-a6eb40a42a0c

workplans/NK-WP-0009-netkingdom-security-pattern-tutorials.md

@@ -13,7 +13,7 @@ created: 2026-05-17
 updated: 2026-07-08
 depends_on:
   - NK-WP-0008
-state_hub_workstream_id: "66c9f1e9-6b2f-454b-a6d4-04e5fe42385a"
+state_hub_workstream_id: "d4d02dbf-3974-502d-8b87-b776fc63e17e"
 ---
 
 # NK-WP-0009 - NetKingdom Security Pattern Tutorials
@@ -69,7 +69,7 @@ Out of scope:
 id: NK-WP-0009-T01
 status: todo
 priority: high
-state_hub_task_id: "79150b07-f25d-4407-a118-e08b6e588d37"
+state_hub_task_id: "3c6824a0-39e6-51f5-b46f-5861a9375439"
 ```
 
 Create a tutorial template with prerequisites, architecture context,
@@ -80,7 +80,7 @@ cross-repo ownership notes.
 id: NK-WP-0009-T02
 status: todo
 priority: high
-state_hub_task_id: "07647ba6-90e1-4569-947a-ebccce7a2d5e"
+state_hub_task_id: "d13760fd-2527-5a39-acb1-11c8091d65a1"
 ```
 
 Write the first tutorial: "Vend temporary S3 credentials from a
@@ -92,7 +92,7 @@ configuration.
 id: NK-WP-0009-T03
 status: todo
 priority: high
-state_hub_task_id: "0f34eda3-f1f3-4c49-9eba-36167b6c5ea9"
+state_hub_task_id: "16cf51a4-0763-59e9-9b4c-d486f5bde908"
 ```
 
 Write "Deploy OpenBao as the canonical secrets manager for a
@@ -104,7 +104,7 @@ integration, leases, unseal, backup, and break-glass.
 id: NK-WP-0009-T04
 status: todo
 priority: medium
-state_hub_task_id: "3c17d1ac-3232-43b4-b541-ea6538da2afb"
+state_hub_task_id: "1d28e3f1-fb39-5d0e-a7ee-ce2e9bc16ed5"
 ```
 
 Write "Use short-lived SSH credentials for admins, agents, and
@@ -115,7 +115,7 @@ implementation.
 id: NK-WP-0009-T05
 status: todo
 priority: medium
-state_hub_task_id: "aff82173-0b8e-4216-855a-887ac68b63e0"
+state_hub_task_id: "c380ef19-4bc2-5ade-b127-baf18c64bf35"
 ```
 
 Write "Add a protected system to flex-auth", covering resource
@@ -126,7 +126,7 @@ decision envelopes, and delegated PDP options.
 id: NK-WP-0009-T06
 status: todo
 priority: medium
-state_hub_task_id: "df427aa3-233f-4479-aed9-706676f8e87d"
+state_hub_task_id: "5b6a1670-a283-56e9-892e-ef8b91194a7b"
 ```
 
 Add tutorial verification fixtures or checklists so each tutorial has a

workplans/NK-WP-0011-enterprise-federation-saml.md

@@ -9,7 +9,7 @@ owner: worsch
 topic_slug: netkingdom
 created: "2026-05-20"
 updated: "2026-07-08"
-state_hub_workstream_id: a44beef8-c18b-4ae7-b7fe-a178cc4fcdf0
+state_hub_workstream_id: "1075448f-d533-5f9e-94b7-c3adfe151a07"
 depends_on:
   - NK-WP-0003
   - NK-WP-0004
@@ -115,7 +115,7 @@ Out of scope:
 
 ```task
 id: NK-WP-0011-T01
-state_hub_task_id: 934f9223-2b6f-4d01-b49b-406b5b98b6e4
+state_hub_task_id: "a5807808-fb34-50de-8f67-9128011833d4"
 status: todo
 priority: high
 ```
@@ -131,7 +131,7 @@ for the broker. Resolve or supersede D2 from NK-WP-0001.
 
 ```task
 id: NK-WP-0011-T02
-state_hub_task_id: 7b514cda-41b3-492f-8731-5a131422059d
+state_hub_task_id: "2fe6f100-3a5d-563e-b033-7d7b846ae487"
 status: todo
 priority: high
 ```
@@ -144,7 +144,7 @@ run a restore drill for `keycloak_db` specifically.
 
 ```task
 id: NK-WP-0011-T03
-state_hub_task_id: 8c29602e-ab9b-446a-8fee-5e2d8fbcb100
+state_hub_task_id: "32d1411b-10a4-5a8b-8f43-99ac46d83908"
 status: todo
 priority: high
 ```
@@ -159,7 +159,7 @@ GitOps-friendly (realm JSON/CR in git).
 
 ```task
 id: NK-WP-0011-T04
-state_hub_task_id: d62d7683-24b1-458c-9fd6-96e576b52a64
+state_hub_task_id: "6697a994-7343-5ea8-8b37-bc3b921e5a9b"
 status: todo
 priority: high
 ```
@@ -173,7 +173,7 @@ end-to-end for at least the Entra ID path.
 
 ```task
 id: NK-WP-0011-T05
-state_hub_task_id: 85319768-5d81-460d-89dc-8de76b63e0dc
+state_hub_task_id: "d845380d-3dbc-5e59-8f2b-5a4d1b32d89d"
 status: todo
 priority: medium
 ```
@@ -188,7 +188,7 @@ the IAM Profile token so flex-auth can gate privileged actions on it.
 
 ```task
 id: NK-WP-0011-T06
-state_hub_task_id: 53801dc2-7bdb-4fa3-9fa0-c1450ef1003b
+state_hub_task_id: "9cb7fd93-c16e-5102-83ce-195b3aa87446"
 status: todo
 priority: high
 ```
@@ -203,7 +203,7 @@ Keycloak issuer per the T1 selection rule. Use the canonical
 
 ```task
 id: NK-WP-0011-T07
-state_hub_task_id: 981f79bd-63ee-4da0-8d7d-9af8e468715e
+state_hub_task_id: "38998c68-29bf-50d2-8c8d-0c75184d5833"
 status: todo
 priority: high
 ```
@@ -218,7 +218,7 @@ used at all, document it as a delegated, non-canonical adapter.
 
 ```task
 id: NK-WP-0011-T08
-state_hub_task_id: 13634760-7817-40c0-b7db-5e0f4196dbf0
+state_hub_task_id: "e5f44ddc-9645-5f61-b84c-da5ab9cccb6d"
 status: todo
 priority: medium
 ```