diff --git a/workplans/RCLUSTER-WP-0019-k3s-admin-kubeconfig-mode.md b/workplans/RCLUSTER-WP-0019-k3s-admin-kubeconfig-mode.md
index 518b3a0..efd4693 100644
--- a/workplans/RCLUSTER-WP-0019-k3s-admin-kubeconfig-mode.md
+++ b/workplans/RCLUSTER-WP-0019-k3s-admin-kubeconfig-mode.md
@@ -12,6 +12,7 @@ updated: "2026-10-20"
 flavor: implementation
 depends_on: []
 related: [CUST-WP-0073]
+state_hub_workstream_id: "9d469414-c8c5-54a8-97e3-0b11bec383a7"
 ---
 
 Owner source work for CUST-WP-0073-T02 (railiance-cluster part: k3s install
@@ -34,6 +35,7 @@ id: RCLUSTER-WP-0019-T01
 status: done
 priority: high
 assignee: claude
+state_hub_task_id: "c456e31d-ecac-55b3-8055-26fc8c1bc5e7"
 ```
 
 ansible/bootstrap.yml installs with `--write-kubeconfig-mode=600`, no longer
@@ -47,6 +49,7 @@ id: RCLUSTER-WP-0019-T02
 status: done
 priority: high
 assignee: claude
+state_hub_task_id: "f25e57c9-523c-5c76-9b02-ed37ecd3598b"
 ```
 
 ansible/k3s-kubeconfig-mode.yml: pinned preimage/candidate hashes, refusal on
@@ -65,6 +68,7 @@ status: wait
 priority: high
 needs_human: true
 blocking_reason: "Attended privileged run on railiance01 (k3s restart, ~30-90s API outage); supervisor runs check mode first, then apply."
+state_hub_task_id: "012fb36b-2b19-51ef-ac0a-22a9ffd3e6a8"
 ```
 
 ```