Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Excellent service”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 2647203528

Proof data

Record hash (SHA-256)

095edc07daf6502dc613651f0ed7bb95df80435a599cdac7d08fcc7f4c2c9332

Signature (Ed25519, base64)

cD53x+5xD7nKayGiahY7znrKZ0ogSE68FfD3mDxD3ksyawd4tHcrXF5LrC0jkFjTTRu0hRe0cA5msjswvRtgCw==

Merkle root

d46cb1ae251ab4eb9927c9aa49346d5122e0972e95f3de0bc747783e39627b20

Merkle path

["0963a21bb93f341dd7610e072c3ae8f1e374c917c823f0e9dcafd8c194524a37","e1f94aac534ed201be1235373e85ec4c1e9ebffc6fa0eae8b50273c00f3fe722","0903d6a4f960f1c694cf45ad2304804e8cc215b9c1e2f43820864522c03c72af","57cef92b251809f2984a4db7edc16c187e97350977ab3f54dea59369f1796c6a","9ed943b7c7b22aad53bae149b3e6b123f2e7dc483dfd1ba7ed1507e8ef4ece0a","207f8ab73f97c6d2035c5437e54bbc2cf63bb6f86dd9a5672c78d5101289c7db","a6b835ac426dbe599d987f12b010247ed55d77787f66c663079f8e9fb9184ece","7977ccd1f3d8f6a5c2bb2dc9bce70d6bfcbb5b417caf1b89d0b08142689f42b8","4420eceebda99c42f80f079f480353434edf6dbf44368b573a3b7dff079361a1","a4dfbecb2d2ae41a5b52588feb25a1f8ad25931121d8b94065bc39a413ec0720","f4a0a7e36156ac2461ab25f65ad345a8d502f4da696c243bdc1239b0e7b71dde","6671a6239d56a71b0a1b95b17eda7299ffc41025d62ad28f06858ef416c422dd","4a14f55edcdf62d56fb3b41ef84c414b51d0eb41f374564376b157da5491ebe7","68887c94a8ff3f8133d2482ef2c9bbf8604123a7794f1bb2158536146de3ab6d","0833ef6f4a75733be647d99ef9b7298f3428688ff5df279f6c54939387fc0497"]

Anchored

2026-08-30

Public log entry

search.sigstore.dev, log index 2647203528 · entry 108e9186e8c5677a5a9d…

Expected log hash

7105e6eba7c1fbef8f8eeceb10ea9f96e5a1584032fbe98d2da1a28ce036bdd9 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1788034732495","kind":"published-quote","locale":"fr","page":"product:proton/proton-drive/fr","quote":"Excellent service","rating":5,"review_date":"2026-07-28","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=me.proton.android.drive","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (d46cb1ae251a…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.