Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Proton sends a notification to my phone.”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 2543547848

Proof data

Record hash (SHA-256)

1010cea402c00f01a948230301f25b57b3a62b6acd95f358645dcfe51b6597f0

Signature (Ed25519, base64)

jHsnFrOK87fdJk7yLlcrgQY6kNgR42GO+0ucgAL9NpRxrD1tfPblwHpPUcuymmmeD+f/8y6zrJrPy5ymLHoRDg==

Merkle root

aacc11945f125ee3fcdef86ba030016c440bcc608f4e51f0ffffdb4cdc5e9321

Merkle path

["1009fb443c190ba3ddeb0badd09d9a2886ce0c44f7ef27d305b8fdc84e5cb23f","9d4a073964d18d76604fbbee159e1580cd7c107574e921cd252e9f6d5a494f8a","7ea6aac26ebeb6cb8ee6bdd488c044d4532b5679c2680e79494a63f31c3a1d81","e683cf8194a9c5d988e8a445b0109200f16b9a8250bc4e290b157f3dafd68c30","f13c54141ecb3ceeca0ffa8f2727a308dcde386b9f8728e5933e5a3a40952b9b","385652568ef2c6ab62c865b83d5448902d29382bde900c004857d2fe15da499c","4527a4aecfaec3ce7277dac71897dab9d306d1d4eac720ae402895adbdaa630b","f3cc065d2b08b1e96e8c68976013e82baa6cd80ff4cd4575740fa6490e5bc747","2b6699445dabeac326a1b96822ae63a6775d23221d3b58f5d937980138a75b9b","084e08b1eb8ce3f63f3cc4ea81640d3db5122d44936cd4ba633444e87220f47b","45bc209c42907432aa899d8bbd4167f3ab2d99683f2a40995cf09663b91f02f3","1c918bc7133b8b33cf667d10d785c214a1388e2dc21092f234795be8425f7f3f","24192d1fe3fa8596b225aa5d8055e7e92d26709ec190f1226b913a3e227f64c3","5366af6eb1ce50b0f459da15c1d7eb12649d0477ecd930804e506d3f2ff66aa2","2309962142b16600f7fc4d57273f3042f382acb91be89aac7f00112f61b58f1d"]

Anchored

2026-08-21

Public log entry

search.sigstore.dev, log index 2543547848 · entry 108e9186e8c5677a921a…

Expected log hash

bb93f13ee7a4a636e28586b842e19662b148eb18166a89b3ae7d189bb8e81689 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1787286345433","kind":"published-quote","locale":"en","page":"theme:proton/communication/en","quote":"Proton sends a notification to my phone.","rating":5,"review_date":"2026-07-22","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=proton.android.pass","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (aacc11945f12…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.