Update newly signed records with internal identifier field

Signed records arrive without a stable ID, preventing reliable references across integrations. It writes the identifier back so integrations and reports run on time.