From b2800e10a7fd7f8622c00ea9954c1255fae6b828 Mon Sep 17 00:00:00 2001
From: tegwick <bernd.worsch@gmail.com>
Date: Wed, 19 Aug 2026 21:20:12 +0200
Subject: [PATCH] chore: track scaffold gitignore and custodian brief

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
---
 .gitignore                                    |  5 +++++
 WORK-RECORDS.md                               | 18 ++++++++++++++++++
 workplans/ZONE-WP-0001-security-zone-model.md |  8 ++++++++
 3 files changed, 31 insertions(+)
 create mode 100644 .gitignore
 create mode 100644 WORK-RECORDS.md

diff --git a/.gitignore b/.gitignore
new file mode 100644
index 0000000..e4e0199
--- /dev/null
+++ b/.gitignore
@@ -0,0 +1,5 @@
+# state-hub: track .claude/rules
+# Claude Code local state (track shared rules; ignore machine-specific files)
+.claude/*
+!.claude/rules/
+!.claude/rules/*.md
diff --git a/WORK-RECORDS.md b/WORK-RECORDS.md
new file mode 100644
index 0000000..a89c252
--- /dev/null
+++ b/WORK-RECORDS.md
@@ -0,0 +1,18 @@
+# Work Records — zone-engine
+
+> Generated by `statehub fix-consistency` (CUST-WP-0061-T04, work-record
+> stage 3). Do not edit by hand — edit the source file/block listed for
+> each record and re-run fix-consistency to refresh this index. Archived
+> workplans are omitted; closed decisions/intakes/engagements stay listed
+> so recently-resolved work is still visible. [auto]
+
+| Kind | ID | Status | Lane | Source |
+| --- | --- | --- | --- | --- |
+| workplan | ZONE-WP-0001 | proposed | — | workplans/ZONE-WP-0001-security-zone-model.md |
+| task | ZONE-WP-0001-T01 | todo | — | workplans/ZONE-WP-0001-security-zone-model.md |
+| task | ZONE-WP-0001-T02 | todo | — | workplans/ZONE-WP-0001-security-zone-model.md |
+| task | ZONE-WP-0001-T03 | todo | — | workplans/ZONE-WP-0001-security-zone-model.md |
+| task | ZONE-WP-0001-T04 | todo | — | workplans/ZONE-WP-0001-security-zone-model.md |
+| task | ZONE-WP-0001-T05 | todo | — | workplans/ZONE-WP-0001-security-zone-model.md |
+| task | ZONE-WP-0001-T06 | todo | — | workplans/ZONE-WP-0001-security-zone-model.md |
+| task | ZONE-WP-0001-T07 | todo | — | workplans/ZONE-WP-0001-security-zone-model.md |
diff --git a/workplans/ZONE-WP-0001-security-zone-model.md b/workplans/ZONE-WP-0001-security-zone-model.md
index 95e0a41..36ed1c4 100644
--- a/workplans/ZONE-WP-0001-security-zone-model.md
+++ b/workplans/ZONE-WP-0001-security-zone-model.md
@@ -10,6 +10,7 @@ topic_slug: netkingdom
 planning_priority: P1
 created: "2026-08-19"
 updated: "2026-08-19"
+state_hub_workstream_id: "a75c8c9c-c108-4831-8d72-4343cce49879"
 ---
 
 # ZONE-WP-0001 — The security zone model
@@ -68,6 +69,7 @@ machinery; it does not grow a second vocabulary beside it.
 id: ZONE-WP-0001-T01
 status: todo
 priority: high
+state_hub_task_id: "ea74316e-b711-4888-9b38-553ebc9ad856"
 ```
 
 **Confirm ownership on the record, and say what publishes where.** This repo was
@@ -84,6 +86,7 @@ for its own sake. Record the outcome either way.
 id: ZONE-WP-0001-T02
 status: todo
 priority: high
+state_hub_task_id: "f1016c71-ccb0-46a7-9143-e81c7ac34cad"
 ```
 
 **Derive the zones from the real estate.** Walk ops-warden's 27 catalog lanes,
@@ -109,6 +112,7 @@ Answer explicitly:
 id: ZONE-WP-0001-T03
 status: todo
 priority: high
+state_hub_task_id: "7f47b750-1ae4-467d-b3c4-064f4ec07dbd"
 ```
 
 **Model stance and failure mode, per control per zone.** Enforced / advisory /
@@ -124,6 +128,7 @@ Controls in scope at minimum: the flex-auth pre-sign gate (`policy.enabled`,
 id: ZONE-WP-0001-T04
 status: todo
 priority: high
+state_hub_task_id: "1c542ca5-2b82-4778-a3e4-c76e932423c9"
 ```
 
 **Design the time-boxed exception — this is the load-bearing task.** A standing
@@ -143,6 +148,7 @@ plainly and drop the runtime. That is a valid and cheaper outcome.
 id: ZONE-WP-0001-T05
 status: todo
 priority: medium
+state_hub_task_id: "f4556ca0-cb26-46ed-9351-d00270bd2309"
 ```
 
 **Declaration format and conformance rule.** Follow `tenancy.yaml`: per-repo,
@@ -154,6 +160,7 @@ observed — a zone that can be quietly widened is not a boundary.
 id: ZONE-WP-0001-T06
 status: todo
 priority: medium
+state_hub_task_id: "8a000c18-6ee7-4328-99c7-53c490435316"
 ```
 
 **Draft the canon standard and offer it.** `security-zones_v0.1.md` for
@@ -164,6 +171,7 @@ landing, as ops-warden's WP-0015 maturity model was.
 id: ZONE-WP-0001-T07
 status: todo
 priority: medium
+state_hub_task_id: "c7ea24df-8aa9-4ead-ba3a-033aa5201c21"
 ```
 
 **Prove it on two consumers.** A model only its author honours is not adopted.