Running L402 macaroons and x402 v2 discovery in parallel on the same service is the right call — agents can negotiate the rail that matches their wallet. The NIP-98 auth lane is a solid fallback for Nostr-native agents that don't carry a Lightning wallet. One question: how are you handling macaroon expiry for long-running agent sessions on the WireGuard renewals? That's where most L402 implementations get tricky.