Disable ENS CCIP Read so resolver-controlled gateway URLs cannot cause backend HTTP requests. Onchain ENS forward and reverse lookups remain available; CCIP-only names fall back to a wallet address.
Operator scripts use encrypted Foundry keystores, private logs, strict address parsing and atomic JSON writes. Uncertain broadcasts are not retried automatically. See docs/OPERATOR_SCRIPTS.md before the next authorized onchain operator action. No real keys were migrated.
Cache proven missing coins and share a bounded manual RPC refresh budget across coins and holdings. Requests with a newer receipt block receive 503 when absence is not yet proven, rather than a false 404.
Validation: full application gate, ABI/renderer fixtures, Foundry, regression tests against local RPC/provider mocks, operator script tests and shell syntax checks. No Solidity or renderer changes, no contract deployment, no test mainnet transactions.