Knowing the account owner is necessary.

Knowing the acting agent is the next layer.

CARV gives that layer identity, authenticated context, observable action and checked evidence.