Didn't know that is at all possible, derive as in actually I can see npub and ed pubkey and verify they are related?
Either that works, or Nostr profiles include the ed25519 key, then use Pkarr to lookup the current relays if the user ever switched to an obscure or even single tenant relay.
Really bullish on this as I have stress tested as much as I could and didn't crack yet.