Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Funktioniert leider nicht mit Brave”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 2631896876

Proof data

Record hash (SHA-256)

04a8a986f1700e01e345518bea5566c70d89b069d53e2bb2e46caf751e48474b

Signature (Ed25519, base64)

oqFHnt7fngJOEt66jRljZBFLYprPgZ86pY1LY8gNpdT5mIas9NAC3mdl5nYcGx82BTA3DJ8U1h/uiXG27L+uBQ==

Merkle root

4553ceda64e0f7e200f881e3be80f06ad7ad366bd41ae2637340e201b97fd992

Merkle path

["04b1c92c0ad4caf54028b972a1cb8a2b1994c77cac002f1a6ea689d96978dae1","ed35cab33826c7ba5a67f01bb9cb1052c8a8192f4e0eda30cdd297ea4836d6cd","ba98cccce8fa8a993c850eb43cb62a160dba2623c040c232fdc32446e78d2c94","11d4d8a4c84a5ee6e53417863105222d87a2d66af61faa6d01206ce6522a9f06","045f143d5d3120e62da5cdb2dff8f31854b3123aa890a0c02268c9aebad81624","b939edc09a733802bd7a03c0eab1ea77b7f8a1a4aeede91e248d645e1100f410","7e64f06693c6842ce457a20e05b128159ea3d622693f3bac7ff16c6b4c7eec91","0ead4f5bcf46813c98dd9d946e36f303b715b680b6f71343caa8bde759344ad5","40f11822a8dee8187b2ed7dc1973f7becf727db52acd9ecb724b7526cd18c64f","76f978b59466f5baa61ba8bca9630fef1543efd3404d3bc8c7787b4cdb67440f","bf907ab4e3e8bdc4fdff06792edd0cf49bed8f19e7ce057c3d16888d39ddd9fc","f9c3d44efaa3124514ee4c64b3279841948ff3e6efae5d5c9176edcffb63b0c4","1b9ac25bd72956239649fced74f841271bb5362800775be62c8a4c65a89114b4","198676edee22eb362b9f42be6e45e0c6688564326d7ac8c78c49d4b535692f55","a8f2b1eb226c55ba6a50b4f9e41f7daf82ed22f31e84ebf68e8ca69f1d094df7"]

Anchored

2026-08-29

Public log entry

search.sigstore.dev, log index 2631896876 · entry 108e9186e8c5677a5ea0…

Expected log hash

82d6416ccfaae92d072047c1941611dbdc6106e011bca285ba92fc51ad50f4c5 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1787970342088","kind":"published-quote","locale":"de","page":"product:proton/proton-pass/de","quote":"Funktioniert leider nicht mit Brave","rating":1,"review_date":"2026-08-11","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=proton.android.pass","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (4553ceda64e0…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.