diff --git a/workplans/RPF-WP-0035-credential-lane-implementation.md b/workplans/RPF-WP-0035-credential-lane-implementation.md
index 30420e0..906f366 100644
--- a/workplans/RPF-WP-0035-credential-lane-implementation.md
+++ b/workplans/RPF-WP-0035-credential-lane-implementation.md
@@ -12,6 +12,7 @@ related:
   - RPF-WP-0032
   - RPF-WP-0033
   - RPF-WP-0034
+state_hub_workstream_id: "975db491-5412-5e27-8e34-14a2417bb039"
 ---
 
 # Credential lane implementation
@@ -28,6 +29,7 @@ stable consumer interfaces. Incident custody remains in RPF-WP-0027/0029.
 id: RPF-WP-0035-T01
 status: done
 priority: medium
+state_hub_task_id: "0f3606bb-e95b-5484-8a57-bcdd6e3916fd"
 ```
 
 Completed 2026-09-05. Preserved the three designs under
@@ -42,6 +44,7 @@ the signing dependency belongs to the proposed FLEX-WP-0020-T05 cutover.
 id: RPF-WP-0035-T02
 status: wait
 priority: high
+state_hub_task_id: "e0c82ea9-05a5-537e-8fbf-67534263572e"
 ```
 
 Supersedes RPF-WP-0032-T02. Design:
@@ -68,6 +71,7 @@ contract, and rollback/cleanup receipts contain no secret material.
 id: RPF-WP-0035-T03
 status: wait
 priority: high
+state_hub_task_id: "f47e5bc5-6f3c-54bb-aa35-260ad03892ba"
 ```
 
 Supersedes RPF-WP-0033-T02. Design:
@@ -96,6 +100,7 @@ The unattended adapter remains a separate demand and gets no operator session.
 id: RPF-WP-0035-T04
 status: wait
 priority: medium
+state_hub_task_id: "35a85846-61d5-54ce-8b18-ede45733d53c"
 ```
 
 Supersedes RPF-WP-0034-T02. Design:
diff --git a/workplans/RPF-WP-0036-platform-service-assurance.md b/workplans/RPF-WP-0036-platform-service-assurance.md
index 9fcff61..9e0a246 100644
--- a/workplans/RPF-WP-0036-platform-service-assurance.md
+++ b/workplans/RPF-WP-0036-platform-service-assurance.md
@@ -8,6 +8,7 @@ status: ready
 owner: codex
 created: "2026-09-05"
 updated: "2026-09-05"
+state_hub_workstream_id: "ca639c3d-3a87-5fa4-ad13-6f2e014b0c84"
 ---
 
 # S3 service assurance and ownership gaps
@@ -25,6 +26,7 @@ retains its own owner and execution gate.
 id: RPF-WP-0036-T01
 status: done
 priority: high
+state_hub_task_id: "9c6d0439-8a14-5921-9d88-95a10b303057"
 ```
 
 Completed 2026-09-05. Assessed all 37 existing plans and their 168 task records,
@@ -39,6 +41,7 @@ This certifies the source review, not live service health or external acceptance
 id: RPF-WP-0036-T02
 status: todo
 priority: high
+state_hub_task_id: "eebcd5c7-4cfd-5084-9a21-ca1e4e748bdd"
 ```
 
 For apps-pg, platform-pg, OpenBao and each supported backup delivery lane,
@@ -60,6 +63,7 @@ and package dependency rather than a blanket new-cluster project here.
 id: RPF-WP-0036-T03
 status: todo
 priority: high
+state_hub_task_id: "d64446fb-870b-5ae9-9628-f1fb9d06c5a4"
 ```
 
 Inventory authoritative CNPG backup/PITR, OpenBao snapshot/isolated restore,
@@ -82,6 +86,7 @@ pass as restore proof. Record independent recovery-key access without values.
 id: RPF-WP-0036-T04
 status: todo
 priority: high
+state_hub_task_id: "5351e0e4-6263-58f0-afb2-7c78c4cd6f68"
 ```
 
 Define service-owned health semantics for backup/WAL age, restore age, seal
@@ -102,6 +107,7 @@ finish before the receiver, but end-to-end acceptance cannot.
 id: RPF-WP-0036-T05
 status: todo
 priority: high
+state_hub_task_id: "5cded2e9-7edd-57bd-9f7e-7977b75004dc"
 ```
 
 Join actual package declarations and authorized metadata to the S3 interface,
@@ -123,6 +129,7 @@ under this task without its own owner-reviewed migration.
 id: RPF-WP-0036-T06
 status: todo
 priority: medium
+state_hub_task_id: "3b74f79c-7366-5d00-bf0e-31c0464a8f33"
 ```
 
 Prepare exact source/entry-point inventories and owner-ready handoffs for
@@ -149,6 +156,7 @@ the assessment and this task does not assert acceptance for another repo.
 id: RPF-WP-0036-T07
 status: todo
 priority: medium
+state_hub_task_id: "b32709d2-581d-5750-a04c-e3494a42d27e"
 ```
 
 Review cache, general object storage and messaging separately with potential