diff --git a/workplans/WHITEHAT-WP-0001-cross-tenant-evidence.md b/workplans/WHITEHAT-WP-0001-cross-tenant-evidence.md
index 2bf9c26..eee2a7e 100644
--- a/workplans/WHITEHAT-WP-0001-cross-tenant-evidence.md
+++ b/workplans/WHITEHAT-WP-0001-cross-tenant-evidence.md
@@ -9,7 +9,7 @@ owner: net-kingdom
 topic_slug: whitehat-security
 created: "2026-08-17"
 updated: "2026-08-23"
-state_hub_workstream_id: "ecc16edc-9f9b-4fc4-8fb1-96b947a59299"
+state_hub_workstream_id: "3049aa1e-b188-514f-9ad7-bf3026094fb9"
 ---
 
 # WHITEHAT-WP-0001 — cross-tenant evidence
@@ -82,7 +82,7 @@ As above. Gates everything.
 id: WHITEHAT-WP-0001-T01
 status: done
 priority: high
-state_hub_task_id: "0d28fd14-1b82-4ac1-907b-02f43e8baae8"
+state_hub_task_id: "13c2feb1-e9ce-5ec5-8887-729541351429"
 ```
 
 Drafted in `docs/rules-of-engagement.md` on 2026-08-18 with authorization
@@ -100,7 +100,7 @@ pre-authorize any live target.
 id: WHITEHAT-WP-0001-T02
 status: done
 priority: high
-state_hub_task_id: "e0070ee6-6060-4a29-bd88-f664034db28e"
+state_hub_task_id: "b467057d-3c1e-5580-b5c8-1b821a1322ef"
 ```
 
 What the adversary is assumed to hold, so a probe is judged against a threat
@@ -129,7 +129,7 @@ failure.
 id: WHITEHAT-WP-0001-T03
 status: done
 priority: high
-state_hub_task_id: "742561f1-97b6-4fcc-8e06-d18508ddecae"
+state_hub_task_id: "e03edc76-a314-50dc-8625-3666c6351818"
 ```
 
 The core technique: run the same request as two tenants and compare.
@@ -164,7 +164,7 @@ review or replacement at 2026-08-23T22:10:25Z.
 id: WHITEHAT-WP-0001-T04
 status: done
 priority: high
-state_hub_task_id: "a2afc0f5-3ece-410c-864c-829a8aac30fc"
+state_hub_task_id: "3956bdad-14cd-5b60-91b5-9a27ac4ab745"
 ```
 
 A probe that has only ever passed is not evidence.
@@ -191,7 +191,7 @@ new admitted engagement runs.
 id: WHITEHAT-WP-0001-T05
 status: progress
 priority: medium
-state_hub_task_id: "6df676e7-bed5-4291-a128-eb6e9844edf2"
+state_hub_task_id: "7c2c3dab-a135-543b-86b1-d543ec6af0fc"
 ```
 
 `rapp-postgres` ADR-0003 supplies an `rls_conformance` view and a template, and
@@ -225,7 +225,7 @@ reviewed runtime-safe surface, named database, and window.
 id: WHITEHAT-WP-0001-T06
 status: progress
 priority: medium
-state_hub_task_id: "99254ab5-f08e-44c7-8399-be706dc03019"
+state_hub_task_id: "3a2d7a31-86b9-5c82-ab88-606b64381b2a"
 ```
 
 The framework had to reword this artifact once already: its first draft
@@ -254,7 +254,7 @@ window and aggressor ceiling do not yet exist.
 id: WHITEHAT-WP-0001-T07
 status: done
 priority: medium
-state_hub_task_id: "54f33288-5361-4b20-8e1f-168866d64644"
+state_hub_task_id: "602d0f23-8406-5882-8f93-ec90151dd475"
 ```
 
 Findings leave this repo in one direction. A run produces: what was attempted,
@@ -282,7 +282,7 @@ resume later without assembling authority during the run.
 id: WHITEHAT-WP-0001-T08
 status: done
 priority: high
-state_hub_task_id: "965ab027-efde-48b7-bb13-84dd308b909d"
+state_hub_task_id: "98b818b2-30d5-584f-8c04-ead58136dcb5"
 ```
 
 Completed 2026-08-22 as a repository contract, not a cluster provision: