Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Now it reconnects alot for absolutely no reason and i have to turn off kill switch, which defeats the whole purpose of me using this VPN.”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
0913629bf6077cba6f0a8f15507755e59fad13cfdd1375376ef9146e55cafb55
Signature (Ed25519, base64)
hquNThQ/jxzJolVgS9lTW7DXvx1ySCLtz7SJnKJLT1GLIyKt3zLy2Z3lfyjV/PDFAdefFwIgM34f1g+XmUYZCg==
Merkle root
a705e7ecc0d73eb5dcdfda7cc03235bd57a2851764423cac43118a70cc8e7b3a
Merkle path
["0915d10071aa0081dada1bb16bb2948335234ac78564506d2ef36317d3dec600","6ceffee580fc09b80422ba3bc172879dcf680a35f7e2674af41c4ffbd3d8ffcd","8912e92b17eb2960bd5360d29f53fce28b04fbc55a32343f40b3bc128b1386a1","907e910ec9fb233959c7f8171b67fb9a10210c062c0081445f3ac1ccf3b54a88","b8934a0489ebc16a81a297aca33a8a0d67ea6ba1a025b583d728b7546b538b6d","3b3495f317274fdf5c79425000f7e02b2eddb8daca118d18b13406a2177ebc31","1772df7df84b45da66cece4aa9e2c4e000111789d7c73ed9e4466440413585e4","1982be1b7f9be0d6c4c5db90745abe3c603761f85aec96df5737d8cc000b4350","52428b9292230373e71f9f3cbf8d33e69c101c6ea8fc566cfbb6deaf090ff825","eb2c0df0ce17569867f7fde0ac52c350aac9eca6c7062236340507eafe39c2a6","2eb67b6dd2ce13ead3a6b8bbe53693e9ae2e03b472c64c48d866f83223e73d64","3d0dd87ae572e5992156e110773d66a0f1bf3ed6de2e93de25b994313f23112d","654e62da0e54472b4b5b9c8deb017fe0e371cb74d7538ff4ae544207e1da0bcc","a2d692bf5b7994c15c39856193482ea7c968acfbc3ff4915a355d04b18f7a933","79a9e38b2f2eb947c3bdfe67a6a6b2d9b99dab4a357fdf9e6328275c8035e767"]
Anchored
2026-08-29
Public log entry
search.sigstore.dev, log index 2631758752 · entry 108e9186e8c5677a44e9…
Expected log hash
b9abdd1fc769097342b82449a3caa919f2ee8419634ee5ba00692ee6314109be The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787969636370","kind":"published-quote","locale":"en","page":"theme:proton/service/en","quote":"Now it reconnects alot for absolutely no reason and i have to turn off kill switch, which defeats the whole purpose of me using this VPN.","rating":2,"review_date":"2026-08-13","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=ch.protonvpn.android","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (a705e7ecc0d7…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.