Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“hasn't sent emails for months now!”
Google Play · 2/5 · 2026-06-29

Checks (re-run on this request)

✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
✓ Public transparency log — Sigstore Rekor log index 2579644936

Proof data

Record hash (SHA-256): 0a835f171efaa0dd632c6e702df86c9fc28d56d5fd0eaa75c810f36d3e3f834a
Signature (Ed25519, base64): N+kZwUQ8S75jH0WQ4XvHblAPWjNp4mPOrys62+OsOdZ/ADk/PvPq8IwgD06zOAN3Efz8TM2Xk6SnzjZe4SncCw==
Merkle root: c768716b2cb21aabc39de506951f775443418285e2c5eda072e3b3c2d945945c
Merkle path: ["0a8332a87902a936e86b89b07e435842e42c3de6d3cafe76e9044210ec8e3e83","7f397b6554a8692317d78ef65cff1da6657ed64253f6f15c24104a74e9c26eb3","d149f8956f56d2e749c98404f7c735e518953122e265652ebe0b139788fa6fbe","26b5d2c41778eff5619943f24424cb3e13c703a5ed5027e476133e190697cef4","252f4a3e1044d92d4b1f39503a624335b014da106e249368a5bd75dbd386e7d1","6ea345b894bafcb3119bd4111be75598030ae40783c3c7900abae23fcddf94aa","49a540dcc7c6c3d4f8cef5dfa310074efd8a980c560d21251f297192651cedd2","6b9fd8a74f9003aefe4044daaeedd99abc4fd3fa25c5bf80b4d6f547f025509f","713b811c959b9f3de58e51d075da2a323c0163c00175510c527db1fd3f4db5de","8db959110300a253de9bde5b5641adced32d1b6da358010e24eb814f3b094875","21dceb876cbe59a71a9bdd1b75264994db32860fb2d37844c2f478d1c57d32f1","2040ad8bb83c34fc495eeb8c9f81caf04fd90dd5129397bcf00a3351408f61cc","38e74f19a86a1311a4dbfb6ff75312ce32e1ae47f608a45fe54b6162c0fae8f4","58ccafd37278be2b9508db439c14e85a319c2716b397eaff7c959a5020ac606e","4c61c84fffc3f3248d19b221d821cc3f0e04d1cfb4151bcd103cb5959dfdd5ed"]
Anchored: 2026-08-24
Public log entry: search.sigstore.dev, log index 2579644936 · entry 108e9186e8c5677aee79…
Expected log hash: 3a9c8e6bb3b2990f2171448c5468a63b9d6f8bed98ee1b72cd7d6f73b4663243 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record: {"dataset_version":"v1787545182186","kind":"published-quote","locale":"en","page":"theme:infomaniak/communication/en","quote":"hasn't sent emails for months now!","rating":2,"review_date":"2026-06-29","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.infomaniak.mail","v":1}

Verify in the public log

Open the Rekor entry (pre-filled with this proof's log index).
In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (c768716b2cb2…), which ties this proof's root to the log entry.
Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.