Register portal integration sequence

WORK-RECORDS.md

@@ -13,7 +13,8 @@
 | workplan | NK-WP-0009 | backlog | — | workplans/NK-WP-0009-netkingdom-security-pattern-tutorials.md |
 | workplan | NK-WP-0011 | backlog | — | workplans/NK-WP-0011-enterprise-federation-saml.md |
 | workplan | NK-WP-0021 | finished | — | workplans/NK-WP-0021-activity-core-ops-sso-operators.md |
-| workplan | NK-WP-0022 | ready | — | workplans/NK-WP-0022-railiance01-identity-cutover-and-coulombcore-retirement.md |
+| workplan | NK-WP-0022 | backlog | — | workplans/NK-WP-0022-railiance01-identity-cutover-and-coulombcore-retirement.md |
+| workplan | NK-WP-0023 | ready | — | workplans/NK-WP-0023-user-engine-portal-platform-integration.md |
 | task | ADHOC-2026-07-02-T01 | done | — | workplans/ADHOC-2026-07-02.md |
 | task | ADHOC-2026-07-02-T02 | done | — | workplans/ADHOC-2026-07-02.md |
 | task | NET-WP-0020-T01 | done | — | workplans/NET-WP-0020-openbao-unseal-custody-and-ssh-automation.md |
@@ -48,5 +49,13 @@
 | task | NK-WP-0022-T06 | wait | — | workplans/NK-WP-0022-railiance01-identity-cutover-and-coulombcore-retirement.md |
 | task | NK-WP-0022-T07 | wait | — | workplans/NK-WP-0022-railiance01-identity-cutover-and-coulombcore-retirement.md |
 | task | NK-WP-0022-T08 | wait | — | workplans/NK-WP-0022-railiance01-identity-cutover-and-coulombcore-retirement.md |
+| task | NK-WP-0023-T01 | todo | — | workplans/NK-WP-0023-user-engine-portal-platform-integration.md |
+| task | NK-WP-0023-T02 | wait | — | workplans/NK-WP-0023-user-engine-portal-platform-integration.md |
+| task | NK-WP-0023-T03 | wait | — | workplans/NK-WP-0023-user-engine-portal-platform-integration.md |
+| task | NK-WP-0023-T04 | wait | — | workplans/NK-WP-0023-user-engine-portal-platform-integration.md |
+| task | NK-WP-0023-T05 | wait | — | workplans/NK-WP-0023-user-engine-portal-platform-integration.md |
+| task | NK-WP-0023-T06 | wait | — | workplans/NK-WP-0023-user-engine-portal-platform-integration.md |
+| task | NK-WP-0023-T07 | wait | — | workplans/NK-WP-0023-user-engine-portal-platform-integration.md |
+| task | NK-WP-0023-T08 | wait | — | workplans/NK-WP-0023-user-engine-portal-platform-integration.md |
 | intake | NK-IN-0001 | closed | blue | docs/intakes/activity-core-ops-sso-operators.md |
 | intake | NK-IN-0002 | closed | blue | docs/intakes/activity-core-ops-sso-operators.md |

workplans/NK-WP-0022-railiance01-identity-cutover-and-coulombcore-retirement.md

@@ -4,7 +4,7 @@ type: workplan
 title: "Cut over NetKingdom identity to railiance01 and retire CoulombCore"
 domain: infotech
 repo: net-kingdom
-status: active
+status: backlog
 owner: codex
 topic_slug: netkingdom
 created: "2026-07-27"
@@ -38,7 +38,7 @@ before state migration or retirement begins.
 
 ```task
 id: NK-WP-0022-T01
-status: todo
+status: wait
 priority: high
 state_hub_task_id: "fe55a2c2-8613-4190-a0b9-07eff4a58146"
 ```

workplans/NK-WP-0023-user-engine-portal-platform-integration.md

@@ -12,6 +12,7 @@ updated: "2026-07-27"
 depends_on:
   - USER-WP-0020
   - KEY-WP-0004
+state_hub_workstream_id: "c652e4ba-6520-4b30-966f-4fb5659439db"
 ---
 
 # NK-WP-0023 - user-engine portal platform integration
@@ -26,6 +27,7 @@ as the first acceptance case.
 id: NK-WP-0023-T01
 status: todo
 priority: high
+state_hub_task_id: "8d96aa5e-9801-4d76-9140-d6076a4f2942"
 ```
 
 Ratify lifecycle sequencing and compensation across user-engine, LLDAP,
@@ -41,6 +43,7 @@ now so later enterprise directories do not require a domain rewrite.
 id: NK-WP-0023-T02
 status: wait
 priority: high
+state_hub_task_id: "89fe51aa-f351-4763-a358-3eec79f28350"
 ```
 
 Implement idempotent create/link/suspend/reactivate/deprovision operations for
@@ -56,6 +59,7 @@ reporting rather than assuming a distributed transaction.
 id: NK-WP-0023-T03
 status: wait
 priority: high
+state_hub_task_id: "76289890-6e6e-45ea-90dc-d3d58eee8b62"
 ```
 
 Register the portal OIDC client with authorization code + PKCE, configure
@@ -70,6 +74,7 @@ platform authority.
 id: NK-WP-0023-T04
 status: wait
 priority: high
+state_hub_task_id: "6ce33c92-031a-4f23-8ee2-108451b394fe"
 ```
 
 Define and implement flex-auth resources/actions for self, tenant-admin, and
@@ -84,6 +89,7 @@ delivery with replay and dead-letter evidence.
 id: NK-WP-0023-T05
 status: wait
 priority: high
+state_hub_task_id: "4ef00e05-1259-4c76-a8ef-ec40b5facd1c"
 ```
 
 Package the portal as a managed platform workload on the default
@@ -98,6 +104,7 @@ this stateful platform control surface on scale-to-zero Knative.
 id: NK-WP-0023-T06
 status: wait
 priority: high
+state_hub_task_id: "96a7cd2b-6cab-47ab-a899-44bc0f6da58c"
 ```
 
 Run end-to-end conformance for registration, login, MFA, tenant creation,
@@ -111,6 +118,7 @@ backup restore, and reconciliation after partial failure.
 id: NK-WP-0023-T07
 status: wait
 priority: high
+state_hub_task_id: "a574dcec-f7cd-417b-aeaa-5392a7428241"
 ```
 
 Use the production portal to onboard
@@ -125,6 +133,7 @@ finish that workplan.
 id: NK-WP-0023-T08
 status: wait
 priority: medium
+state_hub_task_id: "7ef8e1f5-1a0e-4a34-9535-708e3146ae72"
 ```
 
 Document later adapters for customer IdPs/directories, SAML/OIDC federation,