$CCD x401 isn’t ignoring trust, it gives the verifier control over which credential authorities to accept. What I find interesting about Concordium is that it tackles the next question: who does the agent ultimately answer to? That identity anchor could complement x401 nicely, especially as autonomous agents start accessing services and making transactions on their own.