diff --git a/workplans/RAILIANCE-WP-0025-versioned-ephemeral-custody-lifecycle.md b/workplans/RAILIANCE-WP-0025-versioned-ephemeral-custody-lifecycle.md
index 3a40acb..9289201 100644
--- a/workplans/RAILIANCE-WP-0025-versioned-ephemeral-custody-lifecycle.md
+++ b/workplans/RAILIANCE-WP-0025-versioned-ephemeral-custody-lifecycle.md
@@ -15,6 +15,7 @@ related:
   - AUDIT-WP-0008
 origin: run-review
 origin_ref: "WH-ENG-20260822-AUDIT-E2-02 terminal clean admission abort"
+state_hub_workstream_id: "2422d4e7-2125-591e-8e95-80ecc6e09da0"
 ---
 
 # RAILIANCE-WP-0025 — Version ephemeral custody projection and broker handoff
@@ -38,6 +39,7 @@ unattended cleanup controller.
 id: RAILIANCE-WP-0025-T01
 status: done
 priority: high
+state_hub_task_id: "b3a27c15-5717-5c9a-a530-b592dfa4b6f3"
 ```
 
 Publish versioned JSON Schemas and canonical validation for the projection
@@ -61,6 +63,7 @@ Broker approvals also pin the current hashes of all four interface schemas.
 id: RAILIANCE-WP-0025-T02
 status: done
 priority: high
+state_hub_task_id: "b549638b-cd39-57b1-a103-6ceea2a025e1"
 ```
 
 Replace copied per-engagement code and static manifests with one lifecycle that
@@ -84,6 +87,7 @@ engagement-id digest rather than a copied run suffix.
 id: RAILIANCE-WP-0025-T03
 status: done
 priority: high
+state_hub_task_id: "dde2d93a-729d-50ba-88ce-fe0fb12f2c1e"
 ```
 
 Provide a direct owner interface for `whitehat-security` to inspect, verify,
@@ -109,6 +113,7 @@ adapter must pass the interface itself.
 id: RAILIANCE-WP-0025-T04
 status: done
 priority: high
+state_hub_task_id: "8b85184e-c5c1-56af-920b-b2bd3b6eb4ff"
 ```
 
 Centralize remote argv quoting, test shell-hostile arguments, and inject
@@ -132,6 +137,7 @@ UID differs from the receipt.
 id: RAILIANCE-WP-0025-T05
 status: done
 priority: medium
+state_hub_task_id: "af0a0de5-4753-52b9-aa2e-8e052c5254bf"
 ```
 
 Add a fail-closed `cleanup-expired` interface that accepts only a valid