diff --git a/workplans/RPF-WP-0058-reuse-private-source-reader.md b/workplans/RPF-WP-0058-reuse-private-source-reader.md
index 429eb51..6bd7046 100644
--- a/workplans/RPF-WP-0058-reuse-private-source-reader.md
+++ b/workplans/RPF-WP-0058-reuse-private-source-reader.md
@@ -11,6 +11,7 @@ created: '2026-10-15'
 updated: '2026-10-15'
 flavor: implementation
 depends_on: []
+state_hub_workstream_id: "b55a8aec-7457-563b-990b-4a55ca04d2f6"
 ---
 
 Custody/Q1 work under platform INTENT.md: dependable shared secret custody and
@@ -26,6 +27,7 @@ rechecks the authoritative owner's latest allocation.
 id: RPF-WP-0058-T01
 status: done
 priority: high
+state_hub_task_id: "f9b738e1-6d88-5dde-9fc5-b05b3adf2549"
 ```
 
 Prepare CCR-2026-0046, exact seven-source bootstrap contract, silent bounded
@@ -38,6 +40,7 @@ live service, token read, policy apply, or cluster change has occurred.
 id: RPF-WP-0058-T02
 status: wait
 priority: high
+state_hub_task_id: "41d16c6e-9e0b-543b-b600-9288d5762879"
 ```
 
 Platform prepared-review covers own custody artifacts. Forge, apps and consumer
@@ -53,6 +56,7 @@ redirect/HTTPS plus exact source URL allowlist patch and runtime config required
 id: RPF-WP-0058-T03
 status: wait
 priority: high
+state_hub_task_id: "58caf089-9af1-51fd-a94d-aba9abf14a53"
 ```
 
 After review and disposition, attended platform lane executes silent bootstrap.
@@ -69,6 +73,7 @@ Actions denial. Raw provider output and credentials remain suppressed.
 id: RPF-WP-0058-T04
 status: wait
 priority: high
+state_hub_task_id: "9c483fd9-68a5-56b0-813d-c965a11b60d2"
 ```
 
 Apps owner integrates proposed data item and exact fourteen approved URL config,