Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“it says im in a different state on app but im always in Nevada”
Google Play · 1/5 · 2026-08-14

Checks (re-run on this request)

✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
✓ Public transparency log — Sigstore Rekor log index 2483496382

Proof data

Record hash (SHA-256): 0a0ccae5b54149ea7078ad85ce6d45ac9eb1582edb2b1d582c5c953dfae7c187
Signature (Ed25519, base64): Qv3WtYVzvyxj8JxU+oUfsLVbT5Me9zPJhY+B8QNYeHNYd4aWeuBzL43bJ4/ZJaU40YxhNmyFcs0xOTjjN0BfDQ==
Merkle root: 8b5970f4b146530c341d90a6af2810c5e81de90ff6866f5f7ab1feb7b3b58339
Merkle path: ["09fd526f27f1c74b3199a3977393b0ec0b999d94f6d46a53c5341b334e90b70d","c6ce975488ea9adad616122bd667b52a7d5f5c1e1bf3a9a1c19ea4f500b69438","b839c65203701b4beac733c894aae6a5f014bbb2c84f17b84c4f2ba5b39a52f2","a5ef5b6d75e5d50820e2fe9a7983dd0420878d3523b6d313238542bfe910223d","9c116002370edb69246d61b3159fafaf1d88fc5c198eccdd2cd975b63d89484d","b591659c6a026b28731455885535b1a5435ce8f208ceaf107df60840c8b1b7b8","723a052c3e4b8a421d22a5273ea4ce447bcb196a292fbda751b9a007ebeae2bf","75b6d11ea57ef60c7c39e40bdd7af8db26e9c5fcf3eca8f4cd95bb08c548cda6","bc085b0c3a68a36a0dd2af31f6b56b35c8dd71ad64fdf9daa95547b00dad611f","46b242480c5b0bfa71118887101bf1aa3bc42af6e6fdcbcef9515516aea01e07","ddf6a614529feb1d664d5804a5e7f29b205d3e127a4ee07a4f8f2f5e172e2d74","a5f9e9776da24cf1d72732dba510c24b49ca2ec73ff090e98d3dde783aa83a64","8b569dbd35e16a3cf6284fcb35d07452e370b6f363612f06f907e8dd9c1e09c5","e10016342536fc9141a66bbc7dc7af86f923fa1702e2584c59b9c89c4f07f20a"]
Anchored: 2026-08-16
Public log entry: search.sigstore.dev, log index 2483496382 · entry 108e9186e8c5677acf0c…
Expected log hash: 9e156a9df8edbfe61e2aac6bdc3033ceb5ecaf971b297c4e0a7645214890c65d The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record: {"dataset_version":"v1786848988221","kind":"published-quote","locale":"en","page":"brand:proton","quote":"it says im in a different state on app but im always in Nevada","rating":1,"review_date":"2026-08-14","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=ch.protonvpn.android","v":1}

Verify in the public log

Open the Rekor entry (pre-filled with this proof's log index).
In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (8b5970f4b146…), which ties this proof's root to the log entry.
Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.