diff --git a/workplans/SECRETS-WP-0003-pilot-closeout.md b/workplans/SECRETS-WP-0003-pilot-closeout.md
index bdab967..1c27a41 100644
--- a/workplans/SECRETS-WP-0003-pilot-closeout.md
+++ b/workplans/SECRETS-WP-0003-pilot-closeout.md
@@ -9,6 +9,7 @@ owner: codex
 topic_slug: custodian
 created: "2026-06-29"
 updated: "2026-06-29"
+state_hub_workstream_id: "07ee9cee-3efb-4abc-89a8-a30436d6a601"
 ---
 
 # SECRETS-WP-0003 - Close out the whynot-design npm publish pilot (real)
@@ -59,6 +60,7 @@ not change that gate.
 id: SECRETS-WP-0003-T01
 status: todo
 priority: high
+state_hub_task_id: "11586d9d-c6bb-4455-8560-32da75cb06d4"
 ```
 
 Record a real State Hub decision approving establishment of the whynot-design npm
@@ -79,6 +81,7 @@ Acceptance:
 id: SECRETS-WP-0003-T02
 status: todo
 priority: high
+state_hub_task_id: "13a34d32-ab4b-4cf5-a1fb-e3e920649a23"
 ```
 
 Create a dedicated Gitea bot account (e.g. `se-whynot-design`) whose package
@@ -100,6 +103,7 @@ Acceptance:
 id: SECRETS-WP-0003-T03
 status: todo
 priority: high
+state_hub_task_id: "746b5e7f-cc10-43e4-b6d3-7d792d95dfeb"
 ```
 
 Operator mints a package token for the bot account and places it in a mode-0600
@@ -121,6 +125,7 @@ Acceptance:
 id: SECRETS-WP-0003-T04
 status: todo
 priority: high
+state_hub_task_id: "36b925c2-0670-4481-95d9-1f23dcc96575"
 ```
 
 Publish a real version of `@whynot/design` to the coulomb Gitea npm registry via
@@ -141,6 +146,7 @@ Acceptance:
 id: SECRETS-WP-0003-T05
 status: todo
 priority: medium
+state_hub_task_id: "461a7854-6229-4bc1-8d94-f6e2c4e5fa79"
 ```
 
 Coordinate with the ops-warden repo so `warden route find` points npm publish