diff --git a/docs/architecture/state-hub_v0.1.md b/docs/architecture/state-hub_v0.1.md
index d6d9991..dc4370b 100644
--- a/docs/architecture/state-hub_v0.1.md
+++ b/docs/architecture/state-hub_v0.1.md
@@ -3,9 +3,9 @@ id: state-hub-architecture
 title: "State Hub architecture"
 status: proposed
 owner: state-hub
-revision: "draft-2"
+revision: "draft-3"
 version: "0.1"
-last_reviewed: "2026-08-19"
+last_reviewed: "2026-08-31"
 review_interval: 6m
 ---
 
@@ -124,10 +124,12 @@ not supersede the estate decisions:
 
 | Estate ADR | Status | Why it binds this system |
 | --- | --- | --- |
-| `CUST-ADR-001` | accepted | Hub is a read model. Published `/adr/custodian-workplans-as-repo-artefacts/v1/`. |
-| `CUST-ADR-003` | accepted | How the cache invalidates. |
-| `CUST-ADR-007` | accepted | One writer of workplan UUIDs. |
+| `CUST-ADR-001` | accepted | File-backed work originates in repositories; the Hub projects it. Published `/adr/custodian-workplans-as-repo-artefacts/v1/`. |
+| `CUST-ADR-003` | accepted | How derived state invalidates; ADR-012 supplies commit provenance. |
+| `CUST-ADR-007` | accepted | Namespace-aware identity and deterministic work-record UUIDs. |
 | `CUST-ADR-010` | proposed | Two kinds of hub data. |
+| `CUST-ADR-011` | proposed | Namespace and reconciliation limits. |
+| `CUST-ADR-012` | accepted | Forge projection baseline and preliminary overlays. |
 
 | Local ADR | Status | Scope |
 | --- | --- | --- |