Any way to know if a canister was updated?

[wang]

How can we do this off-chain in order build a canister registry as described here?

How can i deploy a canister that is verifiably running public code?

Since canisters generally don’t run like smart contracts on a public chain that everyone can inspect, how can you run a canister that is running code which is publicly verifiable?