diff --git a/workplans/ADHOC-2026-08-23.md b/workplans/ADHOC-2026-08-23.md
index 5eb76ef..e883a35 100644
--- a/workplans/ADHOC-2026-08-23.md
+++ b/workplans/ADHOC-2026-08-23.md
@@ -9,6 +9,7 @@ owner: codex
 topic_slug: railiance
 created: "2026-08-23"
 updated: "2026-08-23"
+state_hub_workstream_id: "50140ec5-5e07-5347-8e46-c1bca675a6e4"
 ---
 
 # RPF-WP-ADHOC-2026-08-23 — apps-pg tenancy evidence declaration
@@ -19,6 +20,7 @@ updated: "2026-08-23"
 id: RPF-WP-ADHOC-2026-08-23-T01
 status: done
 priority: high
+state_hub_task_id: "0b40ab2a-989b-5be1-b9bc-6048d1464004"
 ```
 
 Added the existing authoritative backup/restore artifact to the top-level
@@ -35,6 +37,7 @@ this repository's declaration and checks the repository diff.
 id: RPF-WP-ADHOC-2026-08-23-T02
 status: done
 priority: medium
+state_hub_task_id: "dfa696e9-4c8e-5e5a-acb8-cdcbbcf46ec8"
 ```
 
 Full test discovery exposed two WP0025 broker-readiness tests that built a
diff --git a/workplans/RPF-WP-0028-durable-live-image-inventory.md b/workplans/RPF-WP-0028-durable-live-image-inventory.md
index 500ff02..0f1d669 100644
--- a/workplans/RPF-WP-0028-durable-live-image-inventory.md
+++ b/workplans/RPF-WP-0028-durable-live-image-inventory.md
@@ -8,6 +8,7 @@ status: blocked
 owner: codex
 created: "2026-09-05"
 updated: "2026-09-05"
+state_hub_workstream_id: "622d1208-b085-5ec2-9fb7-5e41f23e1843"
 ---
 
 # Make Forgejo image protection survive checkout replacement
@@ -21,6 +22,7 @@ on 2026-09-05. Repository implementation is complete; live closure remains pendi
 id: RPF-WP-0028-T01
 status: done
 priority: high
+state_hub_task_id: "869d4114-3642-5e69-88d1-1d14e5547634"
 ```
 
 Implemented scripts/refresh_live_images.py and make live-images-refresh. Publication validates exports before mutation, locks concurrent writers, retains all previous cluster entries, and fsyncs an atomic replacement. Offline tests prove repeatability, multi-cluster retention, and preservation on missing, empty, or malformed input.
@@ -36,6 +38,7 @@ alongside a bad one, proving partial coverage cannot authorize deletion.
 id: RPF-WP-0028-T02
 status: wait
 priority: high
+state_hub_task_id: "2d0795ba-ccc0-5ba9-8315-2deb4d0d71a6"
 ```
 
 Requires the production host inventory, activity-core directory mount/configuration update, and cluster rollout hook adoption. Follow docs/forgejo-package-prune.md. Preserve the restored union and worker refusal on missing/empty inventory; do not manually trigger prune. No production migration or live verification occurred in this session.
diff --git a/workplans/RPF-WP-0029-backup-credential-default-removal.md b/workplans/RPF-WP-0029-backup-credential-default-removal.md
index 7582518..97beaa5 100644
--- a/workplans/RPF-WP-0029-backup-credential-default-removal.md
+++ b/workplans/RPF-WP-0029-backup-credential-default-removal.md
@@ -8,6 +8,7 @@ status: blocked
 owner: codex
 created: "2026-09-05"
 updated: "2026-09-05"
+state_hub_workstream_id: "bb326ebb-a313-549e-b35f-1bf17e1c58fd"
 ---
 
 # Remove backup credential default and verify governed replacement
@@ -21,6 +22,7 @@ on 2026-09-05. Repository implementation is complete; live closure remains pendi
 id: RPF-WP-0029-T01
 status: done
 priority: high
+state_hub_task_id: "4b5aefdb-a746-54f9-ba29-ebb840e7848d"
 ```
 
 Removed the literal upload credential default from tools/cmd/forgejo-backup. Missing governed input now fails before cluster operations with a value-free diagnostic; encryption dry-runs skip upload authentication. Offline tests prove missing-input denial, explicit input, and mocked OpenBao resolution.
@@ -31,6 +33,7 @@ Removed the literal upload credential default from tools/cmd/forgejo-backup. Mis
 id: RPF-WP-0029-T02
 status: wait
 priority: high
+state_hub_task_id: "b3f3402f-890b-5781-9b3e-1c9c0d28cea8"
 ```
 
 Provider-side invalidation and replacement custody need the attended provider owner and CCR-2026-0004 lifecycle procedure. Record only non-secret invalidation, encrypted upload and restore receipts. No provider authority or replacement receipt was available; source removal alone does not close the reported exposure. Never record the predecessor value, fingerprint, length, or shape.