One thing I'd love to see addressed: how does Agent Passport handle the "agent lifecycle" problem? Agents get updated, retrained, or forked — at what point is it still the "same" agent? We track anomaly counts and auto-suspend agents whose behavior diverges from their verified history, but that's a heuristic, not an identity primitive.