From 5d889cfc1d5cd41dc5320600dece9bd29ab03a44 Mon Sep 17 00:00:00 2001
From: repo-manager <repo-manager@local>
Date: Tue, 6 Oct 2026 19:31:11 +0200
Subject: [PATCH] repo.work.assign_missing_identifiers

source: repo-manager
reason: deterministic projection registration

Assistant: codex
Assistant-Model: gpt-6.1-sol
Assistant-Session: 01a10e2d-a5ef-7e92-b03d-b1694e915680
---
 workplans/RPF-WP-0052-authelia-platform-smtp-admission.md | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/workplans/RPF-WP-0052-authelia-platform-smtp-admission.md b/workplans/RPF-WP-0052-authelia-platform-smtp-admission.md
index fdf66f4..58f9233 100644
--- a/workplans/RPF-WP-0052-authelia-platform-smtp-admission.md
+++ b/workplans/RPF-WP-0052-authelia-platform-smtp-admission.md
@@ -9,6 +9,7 @@ owner: codex
 topic_slug: railiance-platform
 created: "2026-10-06"
 updated: "2026-10-06"
+state_hub_workstream_id: "4ad59669-1e78-59eb-a94a-0599958bfafc"
 ---
 
 # Purpose and change boundary
@@ -23,6 +24,7 @@ Related: CSOC-WP-0010, NK-WP-0047, CCR-2026-0035. Prepared review branch only.
 id: RPF-WP-0052-T01
 status: done
 priority: high
+state_hub_task_id: "54e60123-afba-548e-94f1-b620e3ed0b6c"
 ```
 
 CCR-2026-0035 and scripts/authelia_smtp_delivery.py reuse the tested silent owner lane; exact sso/authelia-smtp-eso ServiceAccount, OpenBao audience, max15m token/no default policy. Preserve SMTP credential/version and telemetry consumer. Verify password/settings privately and SMTP AUTH without mail send; deny coding-agent direct data/metadata access; refuse different existing policy/role.
@@ -33,6 +35,7 @@ CCR-2026-0035 and scripts/authelia_smtp_delivery.py reuse the tested silent owne
 id: RPF-WP-0052-T02
 status: wait
 priority: high
+state_hub_task_id: "de531f67-3788-53ca-889e-db06deb51205"
 ```
 
 Founder exact approval and own interactive OpenBao platform-admin login required. Execute helper from approved owner checkout with a new mode0600 receipt. Success requires verified receipt and Warden actual child-completion outcome, not exit code alone. Never print mailbox fields/password or reuse static ESO token helpers.
@@ -43,6 +46,7 @@ Founder exact approval and own interactive OpenBao platform-admin login required
 id: RPF-WP-0052-T03
 status: wait
 priority: high
+state_hub_task_id: "60ed616a-0b75-59c2-86cb-e1eae07fb7bb"
 ```
 
 NetKingdom applies dedicated service account/store/projection and checks Ready. Demonstrate correct consumer positive/other-consumer negative boundary, read-only path, credential untouched, actual package SMTP readiness. Record retained role/policy IDs and handoff to NK-WP-0047; do not claim inbox receipt from AUTH alone.