diff --git a/.generated-work-records.json b/.generated-work-records.json
new file mode 100644
index 0000000..0e9f796
--- /dev/null
+++ b/.generated-work-records.json
@@ -0,0 +1 @@
+{"version":1,"repo_slug":"railiance-forge"}
diff --git a/.generated-work-records.mk b/.generated-work-records.mk
new file mode 100644
index 0000000..cf92265
--- /dev/null
+++ b/.generated-work-records.mk
@@ -0,0 +1,8 @@
+# Explicit opt-in recipe; no environment files or external make includes.
+CUSTODIAN_SOURCE ?= /home/worsch/the-custodian
+GENERATED_REPO_railiance-forge ?= railiance-forge
+.PHONY: generated-work-records generated-work-records-check
+generated-work-records:
+	python3 "$(CUSTODIAN_SOURCE)/scripts/generate_staged_work_records.py" --repo . --repo-slug "$(GENERATED_REPO_railiance-forge)"
+generated-work-records-check:
+	python3 "$(CUSTODIAN_SOURCE)/scripts/generate_staged_work_records.py" --repo . --repo-slug "$(GENERATED_REPO_railiance-forge)" --check
diff --git a/Makefile b/Makefile
index 464cef3..7b89a6e 100644
--- a/Makefile
+++ b/Makefile
@@ -133,3 +133,10 @@ test-secret-detection: ## Verify receive-path refusal with an explicitly admitte
 	cd tools/receive-secret-scan && $(GO) test -count=1 ./...
 
 .PHONY: test-secret-detection
+
+# CUST-WP-0079-T05: staged-source generation; hook uses the isolated recipe.
+.PHONY: generated-work-records generated-work-records-check
+generated-work-records:
+	$(MAKE) --no-print-directory -f .generated-work-records.mk generated-work-records
+generated-work-records-check:
+	$(MAKE) --no-print-directory -f .generated-work-records.mk generated-work-records-check
diff --git a/SCOPE.md b/SCOPE.md
index e999b4e..b2b78c9 100644
--- a/SCOPE.md
+++ b/SCOPE.md
@@ -228,3 +228,16 @@ title: Forge resource economics observation
 description: Capture non-secret forge requests, observed utilization, storage, runner and recovery evidence with make forge-observe REMOTE=railiance01. Timestamped observations support resource-control; unknown objectives and unattributed consumption remain explicit. No public economics endpoint is provided.
 keywords: [forgejo, runner, capacity, utilization, storage, allocation, evidence]
 ```
+
+
+## Generated work-record index
+
+This repository opts into staged-source WORK-RECORDS.md generation through
+`.generated-work-records.json` and the isolated `.generated-work-records.mk`
+recipe. `make generated-work-records` reuses the State Hub renderer through
+the Custodian adapter; `make generated-work-records-check` verifies byte-exact
+agreement with staged Markdown. The pre-commit hook uses the isolated recipe,
+preserves unstaged index edits by refusing them, and retains the generated-only
+commit guard and existing security checks. It does not contact the hub, alter
+workplan statuses or grant deployment authority. This consumes shared tooling;
+it does not make this repository the provider of the generator capability.
diff --git a/WORK-RECORDS.md b/WORK-RECORDS.md
index 81c5952..0dc9c3b 100644
--- a/WORK-RECORDS.md
+++ b/WORK-RECORDS.md
@@ -8,7 +8,29 @@
 
 | Kind | ID | Status | Lane | Source |
 | --- | --- | --- | --- | --- |
+| workplan | FORGE-WP-0006 | finished | — | workplans/FORGE-WP-0006-independent-secret-detection.md |
+| workplan | FORGE-WP-0007 | finished | — | workplans/FORGE-WP-0007-reuse-private-reader-contract-review.md |
+| workplan | FORGE-WP-0008 | proposed | — | workplans/FORGE-WP-0008-secret-detection-residual-coverage.md |
+| workplan | FORGE-WP-0009 | proposed | — | workplans/FORGE-WP-0009-retire-stale-gitea-deploy-assets.md |
+| workplan | FORGE-WP-0010 | finished | — | workplans/FORGE-WP-0010-receive-scanner-budget.md |
 | workplan | RFORGE-WP-0002 | finished | — | workplans/RFORGE-WP-0002-forge-resource-economics-evidence.md |
+| task | FORGE-WP-0006-T01 | done | — | workplans/FORGE-WP-0006-independent-secret-detection.md |
+| task | FORGE-WP-0006-T02 | done | — | workplans/FORGE-WP-0006-independent-secret-detection.md |
+| task | FORGE-WP-0006-T03 | cancel | — | workplans/FORGE-WP-0006-independent-secret-detection.md |
+| task | FORGE-WP-0007-T01 | done | — | workplans/FORGE-WP-0007-reuse-private-reader-contract-review.md |
+| task | FORGE-WP-0007-T02 | done | — | workplans/FORGE-WP-0007-reuse-private-reader-contract-review.md |
+| task | FORGE-WP-0007-T03 | done | — | workplans/FORGE-WP-0007-reuse-private-reader-contract-review.md |
+| task | FORGE-WP-0008-T01 | todo | — | workplans/FORGE-WP-0008-secret-detection-residual-coverage.md |
+| task | FORGE-WP-0008-T02 | todo | — | workplans/FORGE-WP-0008-secret-detection-residual-coverage.md |
+| task | FORGE-WP-0008-T03 | todo | — | workplans/FORGE-WP-0008-secret-detection-residual-coverage.md |
+| task | FORGE-WP-0008-T04 | todo | — | workplans/FORGE-WP-0008-secret-detection-residual-coverage.md |
+| task | FORGE-WP-0008-T05 | todo | — | workplans/FORGE-WP-0008-secret-detection-residual-coverage.md |
+| task | FORGE-WP-0008-T06 | todo | — | workplans/FORGE-WP-0008-secret-detection-residual-coverage.md |
+| task | FORGE-WP-0009-T01 | todo | — | workplans/FORGE-WP-0009-retire-stale-gitea-deploy-assets.md |
+| task | FORGE-WP-0009-T02 | todo | — | workplans/FORGE-WP-0009-retire-stale-gitea-deploy-assets.md |
+| task | FORGE-WP-0010-T01 | done | — | workplans/FORGE-WP-0010-receive-scanner-budget.md |
+| task | FORGE-WP-0010-T02 | done | — | workplans/FORGE-WP-0010-receive-scanner-budget.md |
+| task | FORGE-WP-0010-T03 | done | — | workplans/FORGE-WP-0010-receive-scanner-budget.md |
 | task | RFORGE-WP-0002-T01 | done | — | workplans/RFORGE-WP-0002-forge-resource-economics-evidence.md |
 | task | RFORGE-WP-0002-T02 | done | — | workplans/RFORGE-WP-0002-forge-resource-economics-evidence.md |
 | task | RFORGE-WP-0002-T03 | done | — | workplans/RFORGE-WP-0002-forge-resource-economics-evidence.md |