Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“It's truly amazing that there's a free plan despite it being so secure.”
Google Play · 5/5 · 2026-08-13

Checks (re-run on this request)

✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
✓ Public transparency log — Sigstore Rekor log index 2612470999

Proof data

Record hash (SHA-256): 08fa803e15dc64fa4a7a1e1b336139f6a3cf638fb0a770d37964197a1cc01b26
Signature (Ed25519, base64): g7Xt8ITBBCr6CUFFg5qTPqVRD8eOgFnxspk6lX6hSKgTbEEJbLhgDXy+sa95RhsmJ/ezqIu0doUUU8qz6SPKCg==
Merkle root: e1d85175eb3de20460be7478d6cbaae36a1b9ffb3bb4959306f8da40e58cdc53
Merkle path: ["08f5120038d5758ad49dcd889bb8b75b0942b610410d18ec9477baa229ab6012","4b0f8afe81fdb7f1f3c458ae247d3a6c7627c23efab8ce5513775d023602a3a2","7dd91a55c931fdaf586ade4521859484fca65a2bba50ad508994f00947ee6291","51435de9afefd8b6f06d4613efc913abf6a6bfff00370208d18b926056def383","0b6a9373c18c92ae4e1f63ae9c683707ec6c4a26474cbbcbb872f4ab8913e22e","245340746fd5b128548bb7f60ee068ded8937b8ae46de953515a347f31ae580b","c79dd1089f3d12cf887da2b7cbe21f80ef93e7323a25c098e299446494f44205","b86004d702c19ad31f44ece2f6bdb459ccb47de21e70efbffc4b33644426cbd2","7de1fa687531954cc3d7c13652134f8111a3539e805b0d4ae94aea260161a31e","05d58639c723a2412297588e4e8d13d210f5bac1f4b44a500cd62d7d78f25ff2","ef90d7b2b15e2c013860ab2bedbd25211fa2a40f8e6bce6159d67b096d3e8b72","6b15bdaabbafcb8727c139ed3e055f6a1191e894da99242e3d2b5e421a64fc5b","9ca72d0c4bcd0994b86773e4ba6c3b971bc9ef769c49c764975054df4ee33b9d","d2259499a6a15953fa73bcc6db9325f819dce8e785b0f957fb07e2831cb6c331","696d05a8fe8f7b7737f5171e0d56574eb9fcc6fbb6486fca2bc89866a85768bb"]
Anchored: 2026-08-27
Public log entry: search.sigstore.dev, log index 2612470999 · entry 108e9186e8c5677a32d0…
Expected log hash: 320f5e8c7b6a05058b811d24c7cc7229f73f49082335118037aee793eecb309d The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record: {"dataset_version":"v1787800750172","kind":"published-quote","locale":"en","page":"theme:proton/price/en","quote":"It's truly amazing that there's a free plan despite it being so secure.","rating":5,"review_date":"2026-08-13","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=me.proton.android.drive","v":1}

Verify in the public log

Open the Rekor entry (pre-filled with this proof's log index).
In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (e1d85175eb3d…), which ties this proof's root to the log entry.
Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.