diff --git a/WORK-RECORDS.md b/WORK-RECORDS.md
index fc546e2..8eb66aa 100644
--- a/WORK-RECORDS.md
+++ b/WORK-RECORDS.md
@@ -11,6 +11,7 @@
 | workplan | ADHOC-2026-07-21 | finished | — | workplans/ADHOC-2026-07-21.md |
 | workplan | QONTO-WP-0001 | finished | — | workplans/QONTO-WP-0001-statehub-bootstrap.md |
 | workplan | QONTO-WP-0002 | finished | — | workplans/QONTO-WP-0002-policy-kernel-and-rest.md |
+| workplan | QONTO-WP-0003 | ready | — | workplans/QONTO-WP-0003-mcp-surface.md |
 | task | ADHOC-2026-07-21-T01 | done | — | workplans/ADHOC-2026-07-21.md |
 | task | ADHOC-2026-07-21-T02 | done | — | workplans/ADHOC-2026-07-21.md |
 | task | QONTO-WP-0001-T01 | done | — | workplans/QONTO-WP-0001-statehub-bootstrap.md |
@@ -23,3 +24,10 @@
 | task | QONTO-WP-0002-T05 | done | — | workplans/QONTO-WP-0002-policy-kernel-and-rest.md |
 | task | QONTO-WP-0002-T06 | done | — | workplans/QONTO-WP-0002-policy-kernel-and-rest.md |
 | task | QONTO-WP-0002-T07 | done | — | workplans/QONTO-WP-0002-policy-kernel-and-rest.md |
+| task | QONTO-WP-0003-T01 | todo | — | workplans/QONTO-WP-0003-mcp-surface.md |
+| task | QONTO-WP-0003-T02 | todo | — | workplans/QONTO-WP-0003-mcp-surface.md |
+| task | QONTO-WP-0003-T03 | todo | — | workplans/QONTO-WP-0003-mcp-surface.md |
+| task | QONTO-WP-0003-T04 | todo | — | workplans/QONTO-WP-0003-mcp-surface.md |
+| task | QONTO-WP-0003-T05 | todo | — | workplans/QONTO-WP-0003-mcp-surface.md |
+| task | QONTO-WP-0003-T06 | todo | — | workplans/QONTO-WP-0003-mcp-surface.md |
+| task | QONTO-WP-0003-T07 | todo | — | workplans/QONTO-WP-0003-mcp-surface.md |
diff --git a/workplans/QONTO-WP-0003-mcp-surface.md b/workplans/QONTO-WP-0003-mcp-surface.md
index c3c8462..02a259e 100644
--- a/workplans/QONTO-WP-0003-mcp-surface.md
+++ b/workplans/QONTO-WP-0003-mcp-surface.md
@@ -9,6 +9,7 @@ owner: codex
 topic_slug: the-custodian
 created: "2026-07-22"
 updated: "2026-07-22"
+state_hub_workstream_id: "6ad0e906-5fbe-4b9e-8307-0abfc5c4a60a"
 ---
 
 # Phase 2 — MCP surface for all harnesses
@@ -33,6 +34,7 @@ rejected).
 id: QONTO-WP-0003-T01
 status: todo
 priority: high
+state_hub_task_id: "b899ea70-13d4-4b70-8b45-b602359ab90b"
 ```
 
 Pick an MCP server library/transport for the Python 3.12 stack (streamable-HTTP,
@@ -53,6 +55,7 @@ protocols).
 id: QONTO-WP-0003-T02
 status: todo
 priority: high
+state_hub_task_id: "f9e0d403-d6ae-4800-8d42-847c3d70827f"
 ```
 
 Implement MCP tools per the capability map in `specs/ArchitectureBlueprint.md`
@@ -80,6 +83,7 @@ QONTO-WP-0002-T02.
 id: QONTO-WP-0003-T03
 status: todo
 priority: high
+state_hub_task_id: "ad43b09a-ffa5-4df0-8999-bfcef1f11732"
 ```
 
 Wire OIDC/workload auth for the MCP endpoint — **no bank secrets ever reach
@@ -98,6 +102,7 @@ against the running adapter using only that snippet.
 id: QONTO-WP-0003-T04
 status: todo
 priority: medium
+state_hub_task_id: "c6805812-8419-4200-b4ad-a048a541b3be"
 ```
 
 Register the `finance-qonto-read` tool profile (blueprint §6 Phase 2.3) so
@@ -117,6 +122,7 @@ integration doc; at least one harness config example uses it end-to-end.
 id: QONTO-WP-0003-T05
 status: todo
 priority: medium
+state_hub_task_id: "b7d70c3e-fe55-47d9-9180-cd4c0bedc31a"
 ```
 
 Confirm MCP tool calls emit the exact same structured audit event shape as
@@ -134,6 +140,7 @@ call are schema-identical modulo protocol field.
 id: QONTO-WP-0003-T06
 status: todo
 priority: medium
+state_hub_task_id: "1093ec79-eb16-4797-8c9c-5423a925db77"
 ```
 
 Add an MCP-equivalent of `scripts/smoke_rest_api.py`: start the service,
@@ -151,6 +158,7 @@ credentials, matching the Phase 1 REST smoke pattern.
 id: QONTO-WP-0003-T07
 status: todo
 priority: low
+state_hub_task_id: "1dc90a1e-0dcc-40c1-80c9-c7403a348db0"
 ```
 
 Mark workplan finished when T01–T06 are done; confirm REST and MCP surfaces