I need to experiment first. But I see that an additional tag would be added to the event something like [npub, npub1….], that if it can be related to the pubkey that published the event, the root npub would be shown as the author instead. It would also check an event to see if the cpub has been invalidated or not.
Discussion
I think I follow. And there would be a note published by the npub declaring it owns a cpub when it is created?