Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Dommage, j'adorerais pouvoir me passer de Google Drive.”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 2582625066

Proof data

Record hash (SHA-256)

08fc0c7e825562dd1e981f92fbd9d051dd2bd75a1616e1d75a7f3d6d76187673

Signature (Ed25519, base64)

LlB1xL7En2cs1QfK6FI7V4Krp0NQq8IXeRtbZPjhriwJvicjpK/kFHGxjb4pnfyeQ9qFknjTb+OBuT/CrQVsDg==

Merkle root

eeae4c43ae7ab0c29c10de74b2463aacd3a5fdc1b3d5af1f0cfc9c44408c3d2c

Merkle path

["08fbcccde5333c82cc2bc8ba3f0a525658d6c5c7efb465da469cc75e3a71db0f","3c4acc734e64f1d801a4aed251e57ab456ba3ddc2aedbf13de0d0f22d8586285","96113329e6b1797467554a3d0f696157b0e6fa873398d678409201d524f53aa4","ded0d2afc0dae37d11a6ce1136d13deb8935ad1fa03fc99bee9bcadfa1c7a1a6","4938f26ab37c27d6f333a319dc8969098fe5c62f6e8e2207a253c423c99e66c1","53824dbd47a6eb57358e48d1b86ed9167c883195dde9ebf03a5fc98eee6f82bc","369d699e253402f9fd5c951990613b3f9fe2a850f4bc88ec895ef70763d4ba3e","08acb86615fa37fc8c98289bdfdbe34d04b041874ef2c34877ff5d8ec75ec0cd","a2283349f1f990291d5adeb27c3c1283ce93140e9de7882d15432889541eab3d","80f98d96774d7be8166538cb14f77168fe974caee0af9c812f1466717ee6c5da","226f68e6f73ac44a65f90ada9b5cb7a32d8fad60a39252fc4793179b64d9da05","66e2f9e97f7287faee8e69ba5b721fce1f6f2784e8d5caead2c36152f02776a6","09ce2032efd09c421ff5e19e5f8876b49dd7ddefb2240728cfc215a6585cd9c9","9147eb1ea2bb6aaaff51700a1e53c8abaa5e7cab4502c6a4e1f7fda7aaeedc63","8d2fad53fc3e7e38908cbd16989002a31ec7c97679dda7189a08552bb7f22778"]

Anchored

2026-08-25

Public log entry

search.sigstore.dev, log index 2582625066 · entry 108e9186e8c5677a8c30…

Expected log hash

0b31ace64a4c196ffe669b6f1b426aa3540d319d39e67b6031cad355cff0975c The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1787627443698","kind":"published-quote","locale":"fr","page":"product:proton/proton-drive/fr","quote":"Dommage, j'adorerais pouvoir me passer de Google Drive.","rating":1,"review_date":"2026-08-09","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=me.proton.android.drive","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (eeae4c43ae7a…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.