diff --git a/workplans/RPF-WP-0045-eso-kubernetes-auth-activity-core-email-connect.md b/workplans/RPF-WP-0045-eso-kubernetes-auth-activity-core-email-connect.md
index 05e906f..79eb3b8 100644
--- a/workplans/RPF-WP-0045-eso-kubernetes-auth-activity-core-email-connect.md
+++ b/workplans/RPF-WP-0045-eso-kubernetes-auth-activity-core-email-connect.md
@@ -11,6 +11,7 @@ topic_slug: railiance
 created: "2026-09-21"
 updated: "2026-09-21"
 related: [RPF-WP-0037]
+state_hub_workstream_id: "0edc6426-9cc8-5bbe-88ea-c27d9862d96e"
 ---
 
 Two ClusterSecretStores on railiance01 fail validation: OpenBao answers 403 on
@@ -91,6 +92,7 @@ secret value was requested.
 id: RPF-WP-0045-T01
 status: wait
 priority: high
+state_hub_task_id: "766ec8d9-68de-54ff-9be7-4549383890cc"
 ```
 
 Waits on the founder's go-ahead. **The only step that needs the OpenBao
@@ -133,6 +135,7 @@ compare rather than overwrite. Done when both read-backs show the fields above.
 id: RPF-WP-0045-T02
 status: todo
 priority: medium
+state_hub_task_id: "27819462-9bae-57ec-95ba-2b90302bd376"
 ```
 
 Repository and read-only. `ssh railiance01 'kubectl diff -f -' < <file>` for the
@@ -146,6 +149,7 @@ other difference stops T03.
 id: RPF-WP-0045-T03
 status: wait
 priority: high
+state_hub_task_id: "ea84219a-d5f4-59da-af83-8b1de8564650"
 ```
 
 Waits on T01 and the founder's go-ahead. No OpenBao credential. Kubernetes
@@ -174,6 +178,7 @@ Expected output: `[workload-kv-read-email-connect-transactional-eso]`. Same for
 id: RPF-WP-0045-T04
 status: wait
 priority: high
+state_hub_task_id: "8416600e-635e-550b-9e59-72081a3fd7f7"
 ```
 
 Read-only after T03. Force a refresh, then check.
@@ -197,6 +202,7 @@ other than the header. The earlier 37-count had 5 failing; expect 0.
 id: RPF-WP-0045-T05
 status: wait
 priority: medium
+state_hub_task_id: "6bccc229-3428-588a-9488-3fd5d5a07e92"
 ```
 
 The static tokens are already invalid, so rollback cannot restore sync; it
@@ -220,6 +226,7 @@ RPF-WP-0037 does.
 id: RPF-WP-0045-T06
 status: wait
 priority: medium
+state_hub_task_id: "f56d7096-e005-5dd5-afa0-b1affe247fa7"
 ```
 
 Waits on T04 passing for 24 hours (a few 1h refreshes) and the founder's