Why did:web
You control the domain → you control the identity. No dependency on a centralised registrar (like did:genz). Useful for orgs with full sovereignty requirements.
Tradeoff vs did:genz
did:web is more work to set up (need to serve the .well-known/did.json yourself + keep it updated on key rotation). did:genz is one-click but uses our resolver.
Compatibility
GenZAgents supports both. The receipt signing flow doesn't care which DID method you use; verification fetches the DID document per method.
Adjacent
See agent DID, did:genz, DID document.