One idea is to have a tag reference the root public key. The client verifies the event is authentically published by querying for the attested public keys from the event published by the root key