Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Excellente application.”
Google Play · 5/5 · 2026-08-12

Checks (re-run on this request)

✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
✓ Public transparency log — Sigstore Rekor log index 2632728886

Proof data

Record hash (SHA-256): 082d4d1969f447f96851e771ab97b68c4290ddeab2d88aab28e08b08780280b0
Signature (Ed25519, base64): 4aa3N/SF2YOEDdV61d7rdBugmMvPoLTlCCIIwmnLlpXDIdSsfeu41G6ujKLIErvgsWplsSskt7BnrxVtDFBgCw==
Merkle root: 0ba1b80ff2165a62bc9f9f25c7b671d32a81a8e4f351546efb788e090f369376
Merkle path: ["082d81701b017e1dd87bbc0e430c9b0ba883b070398381f09dfc3abadb6b3fcb","f1de7d88d336ac4f07a517b23886aab080facbb852fe45909c21d8156c0cfe3d","bd3316e0e145776ff13dfc8a3b3a67516e26c5d132e1c4729b128ad72d720659","387df94bca3c027c7ce833d1643910263f8e7de277c2ce7fe757d36e7ab4a6cf","a133dc46f8489ccaab8c13ff7358fc6b92e8f17f0ecc69ceeecec5a91b9b0825","477b9881bdbadbb38fd78e07d6c1edc8f5517ad3e4a45ea0a71724f026083de2","18da2e9e890d10f47a40c115daf72b4feb30d2512ed522d67dd6b5d7e1adc82a","2404f4268e44d565298398bf473279e33c8d9882fa1ee81d53dbb644f8a1b601","9745b56bf7d36d3ea7c96ebd8e6e52ecd01c6486206fce635f7a42f6dfe70d90","2b43c15bfd7a1d2cecdfb558bae88c7e2fc8e0a8ccce8ec2d641712d39cb0434","3ad1c1387dce6a9f8741a40084c2ec6d687e21582edb6937cb787a4525a2b787","aab51e2412790f739095eae6d28bc9b4f817dba064b561c920a4f60198d031a0","034ae9d01226d77eaba75b4d19165fc2dcb9e68ed53458f6ac6eae0fdf330abf","e3bdd9cd4a46c1886472a1771a5799292b1c8a1505c3320e374180146177f347","9c07fc5299395e9629e50b7f7f3c0b3bd92e7116744c8ce6fa87db9d24fdb3b0"]
Anchored: 2026-08-29
Public log entry: search.sigstore.dev, log index 2632728886 · entry 108e9186e8c5677a444c…
Expected log hash: ba382b40bcccfd5823af39360159e6e4433d6ffa61f32bd2b6c045e496d9f4ba The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record: {"dataset_version":"v1787975494243","kind":"published-quote","locale":"fr","page":"product:proton/proton-authenticator/fr","quote":"Excellente application.","rating":5,"review_date":"2026-08-12","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=proton.android.authenticator","v":1}

Verify in the public log

Open the Rekor entry (pre-filled with this proof's log index).
In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (0ba1b80ff216…), which ties this proof's root to the log entry.
Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.