diff --git a/WORK-RECORDS.md b/WORK-RECORDS.md
index 58e26fe..f6b4b02 100644
--- a/WORK-RECORDS.md
+++ b/WORK-RECORDS.md
@@ -9,9 +9,11 @@
 | Kind | ID | Status | Lane | Source |
 | --- | --- | --- | --- | --- |
 | workplan | SECURITY-WP-ADHOC-2026-10-03 | finished | — | workplans/ADHOC-2026-10-03.md |
+| workplan | SECURITY-WP-ADHOC-2026-10-24 | finished | — | workplans/ADHOC-2026-10-24.md |
 | workplan | SECURITY-WP-0001 | finished | — | workplans/SECURITY-WP-0001-bootstrap-and-vocabulary.md |
 | workplan | SECURITY-WP-0002 | finished | — | workplans/SECURITY-WP-0002-devops-secrets-management-standard.md |
 | task | SECURITY-WP-ADHOC-2026-10-03-T01 | done | — | workplans/ADHOC-2026-10-03.md |
+| task | SECURITY-WP-ADHOC-2026-10-24-T01 | done | — | workplans/ADHOC-2026-10-24.md |
 | task | SECURITY-WP-0001-T01 | done | — | workplans/SECURITY-WP-0001-bootstrap-and-vocabulary.md |
 | task | SECURITY-WP-0001-T02 | done | — | workplans/SECURITY-WP-0001-bootstrap-and-vocabulary.md |
 | task | SECURITY-WP-0001-T03 | done | — | workplans/SECURITY-WP-0001-bootstrap-and-vocabulary.md |
@@ -22,6 +24,7 @@
 | task | SECURITY-WP-0002-T01 | done | — | workplans/SECURITY-WP-0002-devops-secrets-management-standard.md |
 | task | SECURITY-WP-0002-T02 | done | — | workplans/SECURITY-WP-0002-devops-secrets-management-standard.md |
 | intake | SECURITY-IN-0001 | open | — | intakes/intakes.md |
+| intake | SECURITY-IN-0002 | open | — | intakes/intakes.md |
 | decision | SECURITY-DEC-2026-001 | accepted | — | decisions/decisions.md |
 | decision | SECURITY-DEC-2026-002 | accepted | — | decisions/decisions.md |
 | decision | SECURITY-DEC-2026-003 | accepted | — | decisions/decisions.md |
diff --git a/intakes/intakes.md b/intakes/intakes.md
index eae1c8e..91a1663 100644
--- a/intakes/intakes.md
+++ b/intakes/intakes.md
@@ -49,4 +49,5 @@ description: >-
   offline credential, and ownership wording of principal_type and Environment
   (fold into SECURITY-IN-0001). Docs only; no vocabulary or SEC-DSM change is
   made by this intake.
+state_hub_intake_id: "01a16fe5-7a22-7506-8c2b-bb1f7f84efbf"
 ```
diff --git a/workplans/ADHOC-2026-10-24.md b/workplans/ADHOC-2026-10-24.md
index 30a96eb..736910f 100644
--- a/workplans/ADHOC-2026-10-24.md
+++ b/workplans/ADHOC-2026-10-24.md
@@ -9,6 +9,7 @@ owner: claude-code
 topic_slug: security-canon
 created: "2026-10-24"
 updated: "2026-10-24"
+state_hub_workstream_id: "33898ac0-3736-5e95-8b10-c273f4157c26"
 ---
 
 ## Review mode readings and SEC-DSM citations
@@ -17,6 +18,7 @@ updated: "2026-10-24"
 id: SECURITY-WP-ADHOC-2026-10-24-T01
 status: done
 priority: low
+state_hub_task_id: "81d941b1-7b0f-5792-8316-07989c09b21c"
 ```
 
 Evidence: docs/netkingdom-service-identity-review.md. Owner-scoped documentary