diff --git a/WORK-RECORDS.md b/WORK-RECORDS.md
index ff09821..dba8a65 100644
--- a/WORK-RECORDS.md
+++ b/WORK-RECORDS.md
@@ -13,6 +13,7 @@
 | workplan | RAPPS-WP-0003 | finished | — | workplans/RAPPS-WP-0003-policy-nexus-production-binding.md |
 | workplan | RAPPS-WP-0014 | blocked | — | workplans/RAPPS-WP-0014-vergabe-invited-pilot.md |
 | workplan | RAPPS-WP-0015 | active | — | workplans/RAPPS-WP-0015-coulomb-personal-content-release.md |
+| workplan | RAPPS-WP-0016 | ready | — | workplans/RAPPS-WP-0016-forgejo-netkingdom-login.md |
 | task | RAPPS-WP-0001-T01 | done | — | workplans/RAPPS-WP-0001-cnpg-backup-scheduledbackup-coverage.md |
 | task | RAPPS-WP-0001-T02 | done | — | workplans/RAPPS-WP-0001-cnpg-backup-scheduledbackup-coverage.md |
 | task | RAPPS-WP-0001-T03 | done | — | workplans/RAPPS-WP-0001-cnpg-backup-scheduledbackup-coverage.md |
@@ -36,3 +37,7 @@
 | task | RAPPS-WP-0015-T02 | done | — | workplans/RAPPS-WP-0015-coulomb-personal-content-release.md |
 | task | RAPPS-WP-0015-T03 | done | — | workplans/RAPPS-WP-0015-coulomb-personal-content-release.md |
 | task | RAPPS-WP-0015-T04 | wait | — | workplans/RAPPS-WP-0015-coulomb-personal-content-release.md |
+| task | RAPPS-WP-0016-T01 | todo | — | workplans/RAPPS-WP-0016-forgejo-netkingdom-login.md |
+| task | RAPPS-WP-0016-T02 | wait | — | workplans/RAPPS-WP-0016-forgejo-netkingdom-login.md |
+| task | RAPPS-WP-0016-T03 | wait | — | workplans/RAPPS-WP-0016-forgejo-netkingdom-login.md |
+| task | RAPPS-WP-0016-T04 | wait | — | workplans/RAPPS-WP-0016-forgejo-netkingdom-login.md |
diff --git a/workplans/RAPPS-WP-0016-forgejo-netkingdom-login.md b/workplans/RAPPS-WP-0016-forgejo-netkingdom-login.md
index 65f2cd8..d02aae2 100644
--- a/workplans/RAPPS-WP-0016-forgejo-netkingdom-login.md
+++ b/workplans/RAPPS-WP-0016-forgejo-netkingdom-login.md
@@ -16,6 +16,7 @@ related_repos:
   - prj-forgejo-org-refactor
   - key-cape
   - railiance-platform
+state_hub_workstream_id: "f6b1d6f6-0abb-5774-87b9-bf3cfb640a3b"
 ---
 
 # RAPPS-WP-0016 - Forgejo sign-in through NetKingdom, before the forge closes
@@ -49,6 +50,7 @@ side is key-cape `KEY-WP-0038`.
 id: RAPPS-WP-0016-T01
 status: todo
 priority: high
+state_hub_task_id: "98004ed0-83e6-5f6e-9b18-15b8b2aec2e7"
 ```
 
 ### T01 — Make the local administrator a sealed break-glass
@@ -67,6 +69,7 @@ status: wait
 depends_on: [RAPPS-WP-0016-T01, KEY-WP-0038-T02]
 blocking_reason: "Needs break-glass in place and the NetKingdom client registered with its secret in custody."
 priority: high
+state_hub_task_id: "13cd3aec-c87d-5d3f-a421-39d8ff131edd"
 ```
 
 ### T02 — Add the NetKingdom authentication source
@@ -93,6 +96,7 @@ status: wait
 depends_on: [RAPPS-WP-0016-T02]
 blocking_reason: "Linking and team mapping follow a working authentication source."
 priority: high
+state_hub_task_id: "81f072aa-c316-511e-a2cd-21dd1b1d0a00"
 ```
 
 ### T03 — Link accounts and map groups to teams
@@ -116,6 +120,7 @@ depends_on: [RAPPS-WP-0016-T03]
 needs_human: true
 blocking_reason: "Restricting local password sign-in is a founder decision once NetKingdom sign-in is proven."
 priority: medium
+state_hub_task_id: "32c54737-c40f-5fde-9b91-163f8dcb0068"
 ```
 
 ### T04 — Decide on local password sign-in