Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“The only option is to delete the account and create a new one, which I think is stupid.”
Google Play · 2/5 · 2026-07-17

Checks (re-run on this request)

✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
✓ Public transparency log — Sigstore Rekor log index 2682016602

Proof data

Record hash (SHA-256): 09cc868fbe156d2bd25800b3d5dd98e3c60aee40a76dfdb04d184d60b31235ce
Signature (Ed25519, base64): e8kDpH7Tt36xtVon6h0ZeEDK+y5LZzlXvshB1lSyAuXQ0j3+VGOBDZ8h5717j644UK1BWj3bUGqxPTGiyMTADQ==
Merkle root: ba3b9ee3c1a764a237c6d9f59e08a5448370e387ee4aa25688e1baa9900bb7c8
Merkle path: ["09cd7e4427a315c77d57fac8b4755fb6b4915ff09d54f19e1651eebc19446166","a6fb5da9affc9f4258092d050fa50788ee6720e50ba74feb75f32cf543a0b0fe","752c700ee7f4b1c66b5caa20de6b1da1010287536c42f975bac35c951b6b4aa5","4acf6e7455bdfcf8510f21ef063086fdc8367b57973101fb997fda66a8937016","4baff13c52bc95fa1dd2b0d692f3516939770189aadb57799e00653b3f44ad81","a74eebb6f907368160c7b1276fec2d7f5e267c912fe9ea12de6a9584a41ea1d6","24108b18405353f10200ed92c63a9bc1e5de0727c6c6e85968bdf6c442650d2f","d63ccabd47090301e4e2ed029cb664466c0f4578bbef855017ba79385ac68bd6","56d088bb6818d82feb897b71c4485ace0450f0560a078f4d0a89009a16961b6a","5d7704ab591d046948f40835c319cde688f425f8c045e5137f0eb7bc45b78e8b","8d1df0fe3635e03396299a41b20b0d6e8c2fff2b60c04e182ede3a19bfde5327","10ffc2a9a8cf6a1229f8a8903830ff0227fbe846a1c267cba735937e7ff243d6","bf9dda6cb63d4e43e061a12eb4c0603f6e05cc0296b47362e9aaa0373a392f18","461c98f5765895f7eba79033993e171a1c62b0f447b3c3e83ae0eeec3170f91d","105ed454c1d199fd4c49602b8c5ad04e94f166fbbc654d60a1759dc1a6618062"]
Anchored: 2026-09-02
Public log entry: search.sigstore.dev, log index 2682016602 · entry 108e9186e8c5677a5d51…
Expected log hash: 1226b40d95efc02c2bebef5ba710e31f8d38836dd3aa942fa2cf212191019dae The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record: {"dataset_version":"v1788311625248","kind":"published-quote","locale":"en","page":"subtheme:proton/ordering/free-plan-upgrades/en","quote":"The only option is to delete the account and create a new one, which I think is stupid.","rating":2,"review_date":"2026-07-17","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=ch.protonvpn.android","v":1}

Verify in the public log

Open the Rekor entry (pre-filled with this proof's log index).
In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (ba3b9ee3c1a7…), which ties this proof's root to the log entry.
Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.