diff --git a/workplans/REUSE-WP-0025-private-source-reader-boundary.md b/workplans/REUSE-WP-0025-private-source-reader-boundary.md
index 04dc0fa..ff13038 100644
--- a/workplans/REUSE-WP-0025-private-source-reader-boundary.md
+++ b/workplans/REUSE-WP-0025-private-source-reader-boundary.md
@@ -10,6 +10,7 @@ created: "2026-10-15"
 updated: "2026-10-15"
 flavor: implementation
 depends_on: [CUST-WP-0081]
+state_hub_workstream_id: "23c7bcf5-5f5d-524f-a06e-be5247ae1a98"
 ---
 
 Prepared in an isolated owner checkout under the user's explicit worker-agent
@@ -25,6 +26,7 @@ from this isolated checkout.
 id: REUSE-WP-0025-T01
 status: done
 priority: high
+state_hub_task_id: "1f841e28-fc55-5b12-bb51-bb3291f17d8b"
 ```
 
 Reviewed consumer INTENT, native authenticated acquisition, public API registration
@@ -40,6 +42,7 @@ See docs/assessments/cust81-private-reader/owner-review-r1.md.
 id: REUSE-WP-0025-T02
 status: done
 priority: high
+state_hub_task_id: "a9e794f6-a894-52e6-bd93-4781e05c6a55"
 ```
 
 Patch rejects authenticated cleartext URLs and all redirects, and requires an
@@ -55,6 +58,7 @@ not live authenticated fetch receipts.
 id: REUSE-WP-0025-T03
 status: wait
 priority: high
+state_hub_task_id: "789bb918-4848-5bdf-bfd4-8ee42877addb"
 ```
 
 Owner review and exact credential/rollout disposition remain pending. Platform/apps