diff --git a/WORK-RECORDS.md b/WORK-RECORDS.md
index 02a26d8..edbe309 100644
--- a/WORK-RECORDS.md
+++ b/WORK-RECORDS.md
@@ -45,6 +45,7 @@
 | workplan | USER-WP-0034 | blocked | — | workplans/USER-WP-0034-access-engine-repository-rename-handoff.md |
 | workplan | USER-WP-0035 | blocked | — | workplans/USER-WP-0035-onboarding-handoff-findings.md |
 | workplan | USER-WP-0036 | finished | — | workplans/USER-WP-0036-account-situational-awareness.md |
+| workplan | USER-WP-0037 | active | — | workplans/USER-WP-0037-hub-authority-lookup.md |
 | task | USER-WP-ADHOC-2026-09-06-T01 | done | — | workplans/ADHOC-2026-09-06.md |
 | task | USER-WP-0001-T1 | done | — | workplans/USER-WP-0001-preparation-and-interface-adoption.md |
 | task | USER-WP-0001-T2 | done | — | workplans/USER-WP-0001-preparation-and-interface-adoption.md |
@@ -228,5 +229,8 @@
 | task | USER-WP-0036-T01 | done | — | workplans/USER-WP-0036-account-situational-awareness.md |
 | task | USER-WP-0036-T02 | done | — | workplans/USER-WP-0036-account-situational-awareness.md |
 | task | USER-WP-0036-T03 | done | — | workplans/USER-WP-0036-account-situational-awareness.md |
+| task | USER-WP-0037-T01 | done | — | workplans/USER-WP-0037-hub-authority-lookup.md |
+| task | USER-WP-0037-T02 | todo | — | workplans/USER-WP-0037-hub-authority-lookup.md |
+| task | USER-WP-0037-T03 | todo | — | workplans/USER-WP-0037-hub-authority-lookup.md |
 | intake | USER-IN-0001 | answered | — | intakes/intakes.md |
 | intake | USER-IN-0002 | open | — | intakes/intakes.md |
diff --git a/workplans/USER-WP-0037-hub-authority-lookup.md b/workplans/USER-WP-0037-hub-authority-lookup.md
index 76827f3..960fa77 100644
--- a/workplans/USER-WP-0037-hub-authority-lookup.md
+++ b/workplans/USER-WP-0037-hub-authority-lookup.md
@@ -11,6 +11,7 @@ created: "2026-09-28"
 updated: "2026-09-28"
 related:
   - HUB-WP-0012
+state_hub_workstream_id: "54d99faf-4c53-5927-a82c-feca41de2cf3"
 ---
 
 # Hub authority lookup
@@ -24,6 +25,7 @@ workload grants, root entitlements and deployment acceptance remain separate.
 id: USER-WP-0037-T01
 status: done
 priority: high
+state_hub_task_id: "eb4c1a6c-3cf2-5195-9388-cb9db3190197"
 ```
 
 Add an authorized service lookup for exact issuer/subject and scoped tenant.
@@ -48,6 +50,7 @@ production deployment was added. T02/T03 retain those outstanding owner gates.
 id: USER-WP-0037-T02
 status: todo
 priority: high
+state_hub_task_id: "23a5c211-277b-561e-a4b3-0f8e99537cac"
 ```
 
 With NetKingdom, specify explicit current root-grant custody/revocation and
@@ -61,6 +64,7 @@ account and entitlement observations.
 id: USER-WP-0037-T03
 status: todo
 priority: high
+state_hub_task_id: "c5d67725-c685-50f6-9db8-28114a34014b"
 ```
 
 Expose a narrowly scoped read API with an independently authenticated Hub