Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“It really takes so longer I get bored and cancel the upload.”
Google Play · 2/5 · 2026-08-13

Checks (re-run on this request)

✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
✓ Public transparency log — Sigstore Rekor log index 2582625066

Proof data

Record hash (SHA-256): 0a37dd7cd05f36301fb5d5e1b209fb29e8db0242cf07f5ecdbf0cd54ff78ddf4
Signature (Ed25519, base64): ITwZiXAd2JU3X6BtdrAXE5r76XspRzqQ1HRKL4GUaQERIhhKcVCRyataG7DIn1WNrOO/tFB06qRH/MR5N9A0Dw==
Merkle root: eeae4c43ae7ab0c29c10de74b2463aacd3a5fdc1b3d5af1f0cfc9c44408c3d2c
Merkle path: ["0a34f3b7942f690752fb68fc5c027ffee6f543dbde8cd16b88390a83f6260e85","4289faaf713f3d86cc4c4269cc7305924e55c18de067028d2480fcd6b13aeb28","de652017cb6ec217a74090e51cccf78095064814e88936cc8cd1d7128a191949","99eac71386686406490099235eaac64dda8d08afa77f9571da770a14fff9e130","cf81100eb3064f27dad268ca16f33b15e59693c540eb8032288c94c380109481","6296c0d8fc25107df2503cde483fe564511098d150b223d11e8a68be2e1ed723","7c8ea6229a02df16f46f74b0bcd65d41f4444344906a55e7233b13dee2a1e2e4","08acb86615fa37fc8c98289bdfdbe34d04b041874ef2c34877ff5d8ec75ec0cd","a2283349f1f990291d5adeb27c3c1283ce93140e9de7882d15432889541eab3d","80f98d96774d7be8166538cb14f77168fe974caee0af9c812f1466717ee6c5da","226f68e6f73ac44a65f90ada9b5cb7a32d8fad60a39252fc4793179b64d9da05","66e2f9e97f7287faee8e69ba5b721fce1f6f2784e8d5caead2c36152f02776a6","09ce2032efd09c421ff5e19e5f8876b49dd7ddefb2240728cfc215a6585cd9c9","9147eb1ea2bb6aaaff51700a1e53c8abaa5e7cab4502c6a4e1f7fda7aaeedc63","8d2fad53fc3e7e38908cbd16989002a31ec7c97679dda7189a08552bb7f22778"]
Anchored: 2026-08-25
Public log entry: search.sigstore.dev, log index 2582625066 · entry 108e9186e8c5677a8c30…
Expected log hash: 0b31ace64a4c196ffe669b6f1b426aa3540d319d39e67b6031cad355cff0975c The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record: {"dataset_version":"v1787627443698","kind":"published-quote","locale":"de","page":"product:proton/proton-drive/de","quote":"It really takes so longer I get bored and cancel the upload.","rating":2,"review_date":"2026-08-13","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=me.proton.android.drive","v":1}

Verify in the public log

Open the Rekor entry (pre-filled with this proof's log index).
In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (eeae4c43ae7a…), which ties this proof's root to the log entry.
Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.