chore: commit work in progress before registrar reconciliation

Refs CUST-WP-0068

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 2583210@bnt-lap001
Assistant-Session: f2bff2d5-e9b2-4338-92ca-10282a927006

workplans/ADHOC-2026-08-21.md

@@ -9,6 +9,7 @@ owner: codex
 topic_slug: custodian
 created: "2026-08-21"
 updated: "2026-08-21"
+state_hub_workstream_id: "643a3710-9778-54d2-8bd5-cdc23a4139a6"
 ---
 
 # ADHOC-2026-08-21 - OpenBao dev-test and safe-path robustness
@@ -19,6 +20,7 @@ updated: "2026-08-21"
 id: ADHOC-2026-08-21-T01
 status: done
 priority: low
+state_hub_task_id: "2d309354-7a5f-59f2-9817-15545f0fda5e"
 ```
 
 While verifying SECRETS-WP-0006, the suite exposed two environment-sensitive

workplans/SECRETS-WP-0006-catalog-lane-adoption.md

@@ -9,6 +9,7 @@ owner: codex
 topic_slug: custodian
 created: "2026-08-21"
 updated: "2026-08-21"
+state_hub_workstream_id: "31f7f8ea-7f73-516c-8877-f03a13f1db82"
 ---
 
 # SECRETS-WP-0006 - Adopt concrete OpenBao credential lanes from ops-warden
@@ -73,6 +74,7 @@ handoff, and `exec-file`/`wrapped` are not yet implemented by `exec`.
 id: SECRETS-WP-0006-T01
 status: done
 priority: high
+state_hub_task_id: "94d54df8-4088-5475-992b-7fe838c7c7d7"
 ```
 
 Completed 2026-08-21. Replied in the existing thread with State Hub message
@@ -96,6 +98,7 @@ decision is recorded as non-secret State Hub evidence.
 id: SECRETS-WP-0006-T02
 status: done
 priority: high
+state_hub_task_id: "1a04ee82-ff61-55bc-bae8-62e1229d9dcc"
 ```
 
 Completed 2026-08-21. Added explicit `mount_management`, `delivery_auth`, and
@@ -127,6 +130,7 @@ Acceptance:
 id: SECRETS-WP-0006-T03
 status: done
 priority: high
+state_hub_task_id: "b595f38e-bb31-513b-bc73-796cec76a2aa"
 ```
 
 Completed 2026-08-21. The offered contribution did not arrive, so drafted all
@@ -159,6 +163,7 @@ Acceptance:
 id: SECRETS-WP-0006-T04
 status: done
 priority: high
+state_hub_task_id: "b2ca67ec-48e0-5f85-b4d8-94eb601206c5"
 ```
 
 Completed 2026-08-21: implemented non-mutating existing-mount/auth planning and
@@ -189,6 +194,7 @@ Acceptance:
 id: SECRETS-WP-0006-T05
 status: wait
 priority: high
+state_hub_task_id: "fb103f1e-2ff7-5de5-9a2c-191a19c43542"
 ```
 
 Readiness update 2026-08-21: rendered non-mutating production dry-runs for all
@@ -229,6 +235,7 @@ Acceptance per lane:
 id: SECRETS-WP-0006-T06
 status: wait
 priority: medium
+state_hub_task_id: "1431edae-5791-5892-8c4b-829419b537d2"
 ```
 
 After a lane is natively ready, update the ops-warden delegation register and

workplans/SECRETS-WP-0007-production-lifecycle-hardening.md

@@ -9,6 +9,7 @@ owner: codex
 topic_slug: custodian
 created: "2026-08-23"
 updated: "2026-08-23"
+state_hub_workstream_id: "68a39be1-bd9c-5133-ad64-e7bca892aaf3"
 ---
 
 # SECRETS-WP-0007 - Production-safe provisioning, authorization, and lifecycle hardening
@@ -81,6 +82,7 @@ must not expose the current bootstrap and lifecycle shortcuts as an API.
 id: SECRETS-WP-0007-T01
 status: done
 priority: high
+state_hub_task_id: "5ddba36d-bc86-5670-baf1-50c872e6577e"
 ```
 
 Completed 2026-08-23. During containment, existing multi-field provisioning
@@ -119,6 +121,7 @@ Acceptance:
 id: SECRETS-WP-0007-T02
 status: done
 priority: high
+state_hub_task_id: "ddf3ed54-9cbc-5e18-b15a-5da14cda5d9b"
 ```
 
 Completed 2026-08-23. Replaced raw `field=value` argv writes with a CAS-aware
@@ -155,6 +158,7 @@ Acceptance:
 id: SECRETS-WP-0007-T03
 status: progress
 priority: high
+state_hub_task_id: "bb6073e1-c952-5357-b707-5574cef50f2f"
 ```
 
 Progress 2026-08-23. Added one lifecycle plan model shared by dry-run and live
@@ -200,6 +204,7 @@ Acceptance:
 id: SECRETS-WP-0007-T04
 status: progress
 priority: high
+state_hub_task_id: "4b58edec-c705-55e5-9ece-362e1ff13079"
 ```
 
 Progress 2026-08-23. flex-auth revision `c473f19` now supplies execute-time
@@ -251,6 +256,7 @@ Acceptance:
 id: SECRETS-WP-0007-T05
 status: progress
 priority: high
+state_hub_task_id: "36bcd64d-8b27-542d-b8da-ede1a4d3c22f"
 ```
 
 Progress 2026-08-23. AppRole login material now travels through strict temporary
@@ -299,6 +305,7 @@ Acceptance:
 id: SECRETS-WP-0007-T06
 status: progress
 priority: high
+state_hub_task_id: "431bc91b-439e-595a-8a8a-7d4c82e68322"
 ```
 
 Progress 2026-08-23. KV verification now checks every declared field by default,
@@ -356,6 +363,7 @@ Acceptance:
 id: SECRETS-WP-0007-T07
 status: wait
 priority: high
+state_hub_task_id: "a0a1dd92-d703-5a95-b488-d895f34d5cf7"
 ```
 
 Dependency: T01-T06 complete, then explicit per-lane approvals and scoped