diff --git a/WORK-RECORDS.md b/WORK-RECORDS.md
index bbe19fa..a39afc4 100644
--- a/WORK-RECORDS.md
+++ b/WORK-RECORDS.md
@@ -9,8 +9,18 @@
 | Kind | ID | Status | Lane | Source |
 | --- | --- | --- | --- | --- |
 | workplan | ORGREF-WP-0001 | blocked | — | workplans/ORGREF-WP-0001-foundation-and-entry-gate.md |
+| workplan | ORGREF-WP-0002 | ready | — | workplans/ORGREF-WP-0002-forge-closure-netkingdom-access.md |
 | task | ORGREF-WP-0001-T01 | wait | — | workplans/ORGREF-WP-0001-foundation-and-entry-gate.md |
 | task | ORGREF-WP-0001-T02 | wait | — | workplans/ORGREF-WP-0001-foundation-and-entry-gate.md |
 | task | ORGREF-WP-0001-T03 | wait | — | workplans/ORGREF-WP-0001-foundation-and-entry-gate.md |
 | task | ORGREF-WP-0001-T04 | wait | — | workplans/ORGREF-WP-0001-foundation-and-entry-gate.md |
 | task | ORGREF-WP-0001-T05 | wait | — | workplans/ORGREF-WP-0001-foundation-and-entry-gate.md |
+| task | ORGREF-WP-0002-T01 | wait | — | workplans/ORGREF-WP-0002-forge-closure-netkingdom-access.md |
+| task | ORGREF-WP-0002-T02 | todo | — | workplans/ORGREF-WP-0002-forge-closure-netkingdom-access.md |
+| task | ORGREF-WP-0002-T03 | todo | — | workplans/ORGREF-WP-0002-forge-closure-netkingdom-access.md |
+| task | ORGREF-WP-0002-T04 | wait | — | workplans/ORGREF-WP-0002-forge-closure-netkingdom-access.md |
+| task | ORGREF-WP-0002-T05 | wait | — | workplans/ORGREF-WP-0002-forge-closure-netkingdom-access.md |
+| task | ORGREF-WP-0002-T06 | wait | — | workplans/ORGREF-WP-0002-forge-closure-netkingdom-access.md |
+| task | ORGREF-WP-0002-T07 | wait | — | workplans/ORGREF-WP-0002-forge-closure-netkingdom-access.md |
+| task | ORGREF-WP-0002-T08 | wait | — | workplans/ORGREF-WP-0002-forge-closure-netkingdom-access.md |
+| task | ORGREF-WP-0002-T09 | wait | — | workplans/ORGREF-WP-0002-forge-closure-netkingdom-access.md |
diff --git a/workplans/ORGREF-WP-0002-forge-closure-netkingdom-access.md b/workplans/ORGREF-WP-0002-forge-closure-netkingdom-access.md
index 25d3744..703178a 100644
--- a/workplans/ORGREF-WP-0002-forge-closure-netkingdom-access.md
+++ b/workplans/ORGREF-WP-0002-forge-closure-netkingdom-access.md
@@ -20,6 +20,7 @@ related_repos:
   - fluid-telegram
   - pr-hall-of-helix
   - the-custodian
+state_hub_workstream_id: "f873c10f-1408-5bf2-a834-fed88387804b"
 ---
 
 # ORGREF-WP-0002 - Close the forge: NetKingdom access control first, then private by default
@@ -96,6 +97,7 @@ status: wait
 needs_human: true
 blocking_reason: "The founder decides the visibility policy, the public allowlist and whether an interim lockdown runs before the integration."
 priority: high
+state_hub_task_id: "6387cb32-dd73-5ee0-b51e-d4aea475bcca"
 ```
 
 ### T01 — Decide the visibility policy
@@ -122,6 +124,7 @@ Record a founder decision covering:
 id: ORGREF-WP-0002-T02
 status: todo
 priority: high
+state_hub_task_id: "ace26a22-50e2-58c6-b4ad-85d95c284fce"
 ```
 
 ### T02 — Inventory every anonymous reader
@@ -147,6 +150,7 @@ kind. Uncertain entries are flagged, not dropped.
 id: ORGREF-WP-0002-T03
 status: todo
 priority: high
+state_hub_task_id: "9c2ca7be-23f8-58c5-9bfd-e44a26ce4584"
 ```
 
 ### T03 — Review what has already been public
@@ -164,6 +168,7 @@ status: wait
 depends_on: [ORGREF-WP-0002-T01]
 blocking_reason: "The NetKingdom side follows the visibility and identity decisions; open the key-cape child workplan once T01 is resolved."
 priority: high
+state_hub_task_id: "112617e1-a7c3-59c1-bf25-235d58ec118b"
 ```
 
 ### T04 — NetKingdom: Forgejo as an OIDC client (child workplan in key-cape)
@@ -188,6 +193,7 @@ status: wait
 depends_on: [ORGREF-WP-0002-T04]
 blocking_reason: "Forgejo can only add the authentication source once the NetKingdom client and claims exist."
 priority: high
+state_hub_task_id: "6c635b25-a4ae-5259-9317-de3fe38f6234"
 ```
 
 ### T05 — Forgejo: NetKingdom login and team mapping (child workplan in railiance-forge)
@@ -212,6 +218,7 @@ status: wait
 depends_on: [ORGREF-WP-0002-T02, ORGREF-WP-0002-T05]
 blocking_reason: "Each consumer gets its credential from the T02 inventory, using the identities T05 makes available."
 priority: high
+state_hub_task_id: "1285f94d-3b57-502b-8aeb-96fab9578287"
 ```
 
 ### T06 — Give every consumer its own read identity
@@ -237,6 +244,7 @@ status: wait
 depends_on: [ORGREF-WP-0002-T06]
 blocking_reason: "Rehearsal needs every consumer class migrated onto the canary."
 priority: high
+state_hub_task_id: "0dcf25e2-cda1-5f87-b7fe-5b7e27635565"
 ```
 
 ### T07 — Rehearse the flip and the rollback
@@ -254,6 +262,7 @@ depends_on: [ORGREF-WP-0002-T07]
 needs_human: true
 blocking_reason: "Each production visibility wave needs founder approval after a green rehearsal."
 priority: high
+state_hub_task_id: "42724077-9837-5aef-ad3b-6551f2103aa2"
 ```
 
 ### T08 — Close the forge in waves
@@ -276,6 +285,7 @@ status: wait
 depends_on: [ORGREF-WP-0002-T08]
 blocking_reason: "Verification and handback follow the final wave."
 priority: medium
+state_hub_task_id: "82f53328-02f5-5953-830a-00019d7dee92"
 ```
 
 ### T09 — Verify, hand back and record