diff --git a/workplans/ADHOC-2026-10-27.md b/workplans/ADHOC-2026-10-27.md
index 23a8b34..65824da 100644
--- a/workplans/ADHOC-2026-10-27.md
+++ b/workplans/ADHOC-2026-10-27.md
@@ -8,6 +8,7 @@ status: active
 owner: grok
 created: "2026-10-27"
 updated: "2026-10-27"
+state_hub_workstream_id: "991f8300-1990-5ffd-9f94-c01e29bea2ac"
 ---
 
 ## Allow a text-filename digest through generic-api-key
@@ -16,6 +17,7 @@ updated: "2026-10-27"
 id: FORGE-WP-ADHOC-2026-10-27-T01
 status: done
 priority: high
+state_hub_task_id: "578ab515-f5f7-5d52-b8f3-a2436bc4ab9f"
 ```
 
 The pinned Gitleaks 8.30.1 profile now allowlists one `generic-api-key` match:
@@ -32,6 +34,7 @@ Repository `.gitleaks.toml` files and inline allow comments remain ignored.
 id: FORGE-WP-ADHOC-2026-10-27-T02
 status: wait
 priority: high
+state_hub_task_id: "a2c3e425-a36f-59e0-a07f-600882b6a141"
 ```
 
 Source and the disposable scanner test do not change the installed pre-receive