chore: sync SAND-WP-0010–0012 State Hub IDs

workplans/SAND-WP-0010-cloud-adapters-and-billing.md

@@ -9,6 +9,7 @@ owner: codex
 topic_slug: custodian
 created: "2026-06-24"
 updated: "2026-06-24"
+state_hub_workstream_id: "a78ea9f1-d076-43a6-8798-36fc333edd25"
 ---
 
 # Cloud adapters and billing export
@@ -30,6 +31,7 @@ Carries forward: SAND-WP-0006-T06 (deferred)
 id: SAND-WP-0010-T01
 status: todo
 priority: high
+state_hub_task_id: "5aeb6a17-dc5b-4e39-996c-f7f31c2659f4"
 ```
 
 Document provider key paths via `warden route find` (OpenBao custody — never in
@@ -43,6 +45,7 @@ BYOK section.
 id: SAND-WP-0010-T02
 status: todo
 priority: high
+state_hub_task_id: "205bc70a-aaa6-4cd7-b0a5-11669490c150"
 ```
 
 `extensions/ext.e2b.yaml`, `sandboxer.extensions.e2b:E2BExtension` — provision,
@@ -56,6 +59,7 @@ client (no live API in CI).
 id: SAND-WP-0010-T03
 status: todo
 priority: high
+state_hub_task_id: "b9f104e1-e9d6-4324-b82a-8406be3006e5"
 ```
 
 `extensions/ext.modal.yaml`, `sandboxer.extensions.modal:ModalExtension` —
@@ -68,6 +72,7 @@ routing). Mocked tests.
 id: SAND-WP-0010-T04
 status: todo
 priority: high
+state_hub_task_id: "c11bdaf1-4c25-4c14-a566-0e28b0bd8b1d"
 ```
 
 Update `profile.burst-sandbox` route list to prefer real adapters when credentials
@@ -80,6 +85,7 @@ debit unchanged. Emit meter events with `extension_id` discriminator.
 id: SAND-WP-0010-T05
 status: todo
 priority: medium
+state_hub_task_id: "4eb1b0df-c6d7-4fb6-a7a4-e1455d2fac61"
 ```
 
 On metered destroy, optional export hook (`SANDBOXER_FIN_HUB_URL` or disabled by
@@ -92,6 +98,7 @@ Stub/mock in tests; operator runbook for railiance-platform path.
 id: SAND-WP-0010-T06
 status: todo
 priority: medium
+state_hub_task_id: "d0aba132-b8fa-461b-b722-099868bf1770"
 ```
 
 `docs/cloud-adapters.md`, runbook per provider, registry maturity bump (A5/C5
@@ -103,6 +110,7 @@ when adapters ship). Update `SCOPE.md`, `docs/routing.md`.
 id: SAND-WP-0010-T07
 status: todo
 priority: high
+state_hub_task_id: "3aebb3be-ae5e-4642-9710-9d80a1e8a582"
 ```
 
 `tests/test_e2b.py`, `tests/test_modal.py`, routing fallback tests. Optional

workplans/SAND-WP-0011-reachability-and-consumer-profiles.md

@@ -9,6 +9,7 @@ owner: codex
 topic_slug: custodian
 created: "2026-06-24"
 updated: "2026-06-24"
+state_hub_workstream_id: "614a59b5-1b95-4e5d-9014-676c69a99b5f"
 ---
 
 # Reachability and consumer profiles
@@ -31,6 +32,7 @@ Note: Can proceed in parallel with SAND-WP-0010 where profiles are self-hosted.
 id: SAND-WP-0011-T01
 status: todo
 priority: high
+state_hub_task_id: "ccf21aaf-9439-41e2-9ce3-becc08f734a7"
 ```
 
 Extend `Reachability` model: optional `tunnel` (local port / alias), `tunnel_via`
@@ -44,6 +46,7 @@ Document contract in `docs/meta-framework.md`; sand-boxer does not own tunnels.
 id: SAND-WP-0011-T02
 status: todo
 priority: medium
+state_hub_task_id: "61d41e09-ca21-4fbe-9b56-98f0ffe356c6"
 ```
 
 Optional `sandboxer reachability show <id>` (or enrich `get` output) surfacing
@@ -56,6 +59,7 @@ tunnel bring-up in sand-boxer — pointer only.
 id: SAND-WP-0011-T03
 status: todo
 priority: high
+state_hub_task_id: "1a10a784-6a7c-4af6-9fbf-48d31e7e22cb"
 ```
 
 Profile for glas-harness: longer TTL defaults, `actor: agt` examples, route
@@ -68,6 +72,7 @@ Update `docs/integrations/glas-harness.md` with real profile id.
 id: SAND-WP-0011-T04
 status: todo
 priority: high
+state_hub_task_id: "a8142492-32c8-40d4-b882-b555858b44bb"
 ```
 
 Build sandbox profile binding `profile.vm-haskell-build` or compose path;
@@ -81,6 +86,7 @@ Update `docs/integrations/snuggle-inventor.md`.
 id: SAND-WP-0011-T05
 status: todo
 priority: medium
+state_hub_task_id: "df4053de-ec74-40a3-ae9b-422c1be973cd"
 ```
 
 `SetupSpec.secret_refs` resolution in manager pre-provision hook: fetch via
@@ -93,6 +99,7 @@ operator-documented OpenBao path; pass to extension handle; never store on
 id: SAND-WP-0011-T06
 status: todo
 priority: medium
+state_hub_task_id: "9d5feebe-16a2-4448-ad0c-3276858341d1"
 ```
 
 `scripts/smoke-agent-dev.sh`, `scripts/smoke-build-profile.sh` (dry-run or
@@ -104,6 +111,7 @@ CoulombCore gated). Integration section in each consumer doc.
 id: SAND-WP-0011-T07
 status: todo
 priority: high
+state_hub_task_id: "849e0701-fe8f-4c08-ac24-98cdf554c24b"
 ```
 
 Model tests for reachability fields; profile loader tests; update `SCOPE.md`

workplans/SAND-WP-0012-packer-orchestration.md

@@ -9,6 +9,7 @@ owner: codex
 topic_slug: custodian
 created: "2026-06-24"
 updated: "2026-06-24"
+state_hub_workstream_id: "87838886-0f4a-4eae-8d0e-b464933089de"
 ---
 
 # Packer build orchestration
@@ -30,6 +31,7 @@ Carries forward: SAND-WP-0005-T06 (deferred)
 id: SAND-WP-0012-T01
 status: todo
 priority: high
+state_hub_task_id: "9dc30d94-1797-4c35-81a0-e75e5414f6fc"
 ```
 
 Extend `VMPackerExtension` with optional `build` mode: inputs `packer_template`,
@@ -43,6 +45,7 @@ destroy VM image. Tests mocked subprocess.
 id: SAND-WP-0012-T02
 status: todo
 priority: high
+state_hub_task_id: "8e30794c-d8b9-48c7-ae93-db84724eedf2"
 ```
 
 New profile binding build mode with placement and TTL suitable for long builds.
@@ -54,6 +57,7 @@ Document inputs in `docs/migration-build-machines.md`.
 id: SAND-WP-0012-T03
 status: todo
 priority: high
+state_hub_task_id: "685f766c-90ae-4698-87d0-b61535e7491a"
 ```
 
 `create` path selects build vs attach via profile or `inputs.mode=build|attach`.
@@ -65,6 +69,7 @@ Progress events to State Hub during long provision. CLI help text.
 id: SAND-WP-0012-T04
 status: todo
 priority: medium
+state_hub_task_id: "6c4c0f85-5153-4fe9-84e6-26c5c9d33bb1"
 ```
 
 In `the-custodian`: `make remote-build PROJECT=` delegates to
@@ -78,6 +83,7 @@ mirroring SAND-WP-0004 e2e shim pattern.
 id: SAND-WP-0012-T05
 status: todo
 priority: low
+state_hub_task_id: "701b2640-36ea-4702-b660-7169a4ec72cc"
 ```
 
 Optional helper: register tunnel port from build-machines port-registry when VM
@@ -90,6 +96,7 @@ if full automation deferred.
 id: SAND-WP-0012-T06
 status: todo
 priority: high
+state_hub_task_id: "2378cd6a-ac23-47e9-a5d9-0d80b9e9f7af"
 ```
 
 Update `docs/migration-build-machines.md`, `docs/extension-sdk.md`, operator