diff --git a/WORK-RECORDS.md b/WORK-RECORDS.md
index 77e0895..6170009 100644
--- a/WORK-RECORDS.md
+++ b/WORK-RECORDS.md
@@ -30,6 +30,7 @@
 | workplan | RPF-WP-0051 | finished | — | workplans/RPF-WP-0051-informed-decision-requester-workload-delivery.md |
 | workplan | RPF-WP-0052 | finished | — | workplans/RPF-WP-0052-authelia-platform-smtp-admission.md |
 | workplan | RPF-WP-0053 | proposed | — | workplans/RPF-WP-0053-coulomb-paired-backup-admission.md |
+| workplan | RPF-WP-0054 | proposed | — | workplans/RPF-WP-0054-keycape-client-secret-generate-lane.md |
 | task | RPF-WP-0015-T01 | done | — | workplans/RPF-WP-0015-audit-core-custody-and-recovery-coordination.md |
 | task | RPF-WP-0015-T02 | wait | — | workplans/RPF-WP-0015-audit-core-custody-and-recovery-coordination.md |
 | task | RPF-WP-0015-T03 | wait | — | workplans/RPF-WP-0015-audit-core-custody-and-recovery-coordination.md |
@@ -127,6 +128,13 @@
 | task | RPF-WP-0053-T04 | todo | — | workplans/RPF-WP-0053-coulomb-paired-backup-admission.md |
 | task | RPF-WP-0053-T05 | progress | — | workplans/RPF-WP-0053-coulomb-paired-backup-admission.md |
 | task | RPF-WP-0053-T06 | done | — | workplans/RPF-WP-0053-coulomb-paired-backup-admission.md |
+| task | RPF-WP-0054-T01 | todo | — | workplans/RPF-WP-0054-keycape-client-secret-generate-lane.md |
+| task | RPF-WP-0054-T02 | todo | — | workplans/RPF-WP-0054-keycape-client-secret-generate-lane.md |
+| task | RPF-WP-0054-T03 | todo | — | workplans/RPF-WP-0054-keycape-client-secret-generate-lane.md |
+| task | RPF-WP-0054-T04 | todo | — | workplans/RPF-WP-0054-keycape-client-secret-generate-lane.md |
+| task | RPF-WP-0054-T05 | todo | — | workplans/RPF-WP-0054-keycape-client-secret-generate-lane.md |
+| task | RPF-WP-0054-T06 | todo | — | workplans/RPF-WP-0054-keycape-client-secret-generate-lane.md |
+| task | RPF-WP-0054-T07 | wait | — | workplans/RPF-WP-0054-keycape-client-secret-generate-lane.md |
 | intake | RPF-IN-0001 | closed | — | intakes/intakes.md |
 | intake | RPF-IN-0002 | open | — | intakes/intakes.md |
 | intake | RPF-IN-0003 | open | — | intakes/intakes.md |
diff --git a/workplans/RPF-WP-0054-keycape-client-secret-generate-lane.md b/workplans/RPF-WP-0054-keycape-client-secret-generate-lane.md
index b8623ce..5f8057f 100644
--- a/workplans/RPF-WP-0054-keycape-client-secret-generate-lane.md
+++ b/workplans/RPF-WP-0054-keycape-client-secret-generate-lane.md
@@ -8,6 +8,7 @@ status: proposed
 owner: claude-code
 created: "2026-10-09"
 updated: "2026-10-09"
+state_hub_workstream_id: "73694adc-12a0-5226-a814-ee096d158f60"
 ---
 
 Demand: net-kingdom SecurityCaseType `oidc-browser-relying-party` 1.0
@@ -46,6 +47,7 @@ case's `client-secret-path` artifacts and are unchanged here.
 id: RPF-WP-0054-T01
 status: todo
 priority: high
+state_hub_task_id: "38f92db0-317e-5b2b-8bbd-b4af3272cc21"
 ```
 
 Confirm with key-cape: client_id pattern (proposed `^[a-z0-9][a-z0-9-]{2,62}$`),
@@ -66,6 +68,7 @@ id: RPF-WP-0054-T02
 status: todo
 priority: high
 needs_human: true
+state_hub_task_id: "4183abc4-4acc-5937-9f27-005feb181025"
 ```
 
 Two options, both create-only (ACL `create` without `update`, so an existing
@@ -99,6 +102,7 @@ id: RPF-WP-0054-T03
 status: todo
 priority: high
 depends_on: [RPF-WP-0054-T01, RPF-WP-0054-T02]
+state_hub_task_id: "3e159e92-f5ee-5a92-b887-e06daf7dfbdb"
 ```
 
 Add `credential.py generate --grant keycape/client-secret-generate --client-id
@@ -130,6 +134,7 @@ id: RPF-WP-0054-T04
 status: todo
 priority: high
 depends_on: [RPF-WP-0054-T02]
+state_hub_task_id: "74eb1309-df16-5163-9840-ffb88072d09e"
 ```
 
 Add the grant to `credential-grants/catalog.yaml` (class per T02, TTL 5m, exec
@@ -148,6 +153,7 @@ status: todo
 priority: high
 needs_human: true
 depends_on: [RPF-WP-0054-T03, RPF-WP-0054-T04]
+state_hub_task_id: "a21d1915-fee9-5c31-89e7-a4560c645950"
 ```
 
 Founder session:
@@ -167,6 +173,7 @@ id: RPF-WP-0054-T06
 status: todo
 priority: medium
 depends_on: [RPF-WP-0054-T05]
+state_hub_task_id: "d7015584-3429-5f32-b4bc-0a9b64017c15"
 ```
 
 Reply to ops-warden `d9f889b1` and ops-mason `789feb39` with the command, the
@@ -183,6 +190,7 @@ id: RPF-WP-0054-T07
 status: wait
 priority: low
 depends_on: [RPF-WP-0054-T05]
+state_hub_task_id: "d5f0beb6-54dc-502b-9c13-0cb6892ab87d"
 ```
 
 Design `keycape-client-secret-rotate`: `update` with CAS = current version, an