> Q-day means there is a way to deterministically retrieve any private key from a public key

That's exactly what it means. (Note also that under ECDSA you can retrieve a public key from a valid signature).

How do you prove anything, after the key material is compromised?