diff --git a/WORK-RECORDS.md b/WORK-RECORDS.md
index 092b18e..5dd702a 100644
--- a/WORK-RECORDS.md
+++ b/WORK-RECORDS.md
@@ -116,8 +116,6 @@
 | task | WARDEN-WP-0031-T04 | done | — | workplans/WARDEN-WP-0031-policy-caller-identity.md |
 | task | WARDEN-WP-0031-T05 | cancel | — | workplans/WARDEN-WP-0031-policy-caller-identity.md |
 | task | WARDEN-WP-0032-T01 | todo | — | workplans/WARDEN-WP-0032-security-zones.md |
-| task | WARDEN-WP-0032-T02 | todo | — | workplans/WARDEN-WP-0032-security-zones.md |
-| task | WARDEN-WP-0032-T03 | todo | — | workplans/WARDEN-WP-0032-security-zones.md |
-| task | WARDEN-WP-0032-T04 | todo | — | workplans/WARDEN-WP-0032-security-zones.md |
-| task | WARDEN-WP-0032-T05 | todo | — | workplans/WARDEN-WP-0032-security-zones.md |
-| task | WARDEN-WP-0032-T06 | todo | — | workplans/WARDEN-WP-0032-security-zones.md |
+| task | WARDEN-WP-0032-T02 | wait | — | workplans/WARDEN-WP-0032-security-zones.md |
+| task | WARDEN-WP-0032-T03 | wait | — | workplans/WARDEN-WP-0032-security-zones.md |
+| task | WARDEN-WP-0032-T04 | wait | — | workplans/WARDEN-WP-0032-security-zones.md |
diff --git a/workplans/WARDEN-WP-0032-security-zones.md b/workplans/WARDEN-WP-0032-security-zones.md
index 956688a..806a4d4 100644
--- a/workplans/WARDEN-WP-0032-security-zones.md
+++ b/workplans/WARDEN-WP-0032-security-zones.md
@@ -12,6 +12,7 @@ depends_on_workplans:
   - WARDEN-WP-0031
 created: "2026-08-19"
 updated: "2026-08-19"
+state_hub_workstream_id: "f1b6cdcb-5e16-48ab-a72b-339e909e92f0"
 ---
 
 # WARDEN-WP-0032 — Adopt security zones as a consumer
@@ -51,6 +52,7 @@ and most of that estate is ops-warden's:
 id: WARDEN-WP-0032-T01
 status: todo
 priority: high
+state_hub_task_id: "b6dac514-4b05-47b8-8745-6a1c67b6100e"
 ```
 
 **Hand the estate inputs to `ZONE-WP-0001-T02`.** Not a design proposal — the
@@ -66,6 +68,7 @@ against keeping it.
 id: WARDEN-WP-0032-T02
 status: wait
 priority: high
+state_hub_task_id: "08735f17-fe7e-4a6a-9b71-f350f98c30b1"
 ```
 
 **Replace `policy.enabled` with a zone-aware control.** Waits on
@@ -83,6 +86,7 @@ This closes `WARDEN-WP-0031-T05`.
 id: WARDEN-WP-0032-T03
 status: wait
 priority: medium
+state_hub_task_id: "fd642377-8d64-473c-b684-f8f1a842c223"
 ```
 
 **Declare ops-warden's zones** in whatever format `ZONE-WP-0001-T05` settles,
@@ -94,6 +98,7 @@ failure mode that looks like progress.
 id: WARDEN-WP-0032-T04
 status: wait
 priority: medium
+state_hub_task_id: "1af3d26e-ce21-46ca-a56c-486d52b76dcb"
 ```
 
 **Amend `ADR-0006`.** Once zones exist and enforcement scoping is owned by