maybe you could republish the signed attestation from the parent in the metadata of every child note. also give attestations an expiry date, people can adjust the attestation TTL to fit their paranoia, so no need for the relay to do anything but relay at that point. no need to add PKI roles to relay...