Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“allows free use with this data privacy policy”
Google Play · 5/5 · 2026-07-28

Checks (re-run on this request)

✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
✓ Public transparency log — Sigstore Rekor log index 2582684999

Proof data

Record hash (SHA-256): 0af9264cc89cc9555236a60f54dc0ad407f92bb3e1767e7237fa8b7503c4f4c5
Signature (Ed25519, base64): RtXpEo1V5Ziz0IbvIwl9CxFBcqP5Z9vLAUCFTqACzVnjFjGtUrmbqKdf+cZ0ep649tqG1u53PMyWM2cxWJMOCA==
Merkle root: dd24e9f4e2c157def3e88a505d0f69726bf8aab26b1f5c4272da69b916c6842d
Merkle path: ["0af34dd760768959461f832b4006ede214f79f32081dd8be523d76760b2b2d0d","87243fac49e74c8cd5ce4bf17589bac36889b06972c1b28013940a6c466cc3f1","f4622b87de0728b1218e591c8bbbe8be06fbe2ed3fa35af622d258cf5130c9e4","107b63923f3822ab586407c00646fbfd719f9e7d43900aaa766cd152adc5e3cd","2fda0db66869f75b39bc8c880cf2a8b1243cc6b9ff55244b5fddf316e0c7fa2f","1cd37e8cca677ade32a1e640559312911f1d34764ef957d6131f6d50458c1c86","a6e310e6700da5f83d2c439ced867e348b9bf0e5a0dfc597abc513319b3c6780","6582f0171e8d22f6d6458f62c64921601c3b99195cd583f18b7bc0cd5070c7b1","2b634e0a55d3cba5ddbb5e8f75fb12f6da04e6069f0b37a32a079b82fe77e801","e9bf870407db3e6b8313c23c10d0a77aeaea3fd985ab76a2d318405dd9ff06d4","6d0be9f8f3086c3ca5ad7c4a7436dde2922c85cbdaefdf286bd8d8a7850295e3","f55d259140b1887f40efd36dc62d4702f641032856993f66621d17ae5fdbb64c","7e11d89f2ffe47873f06394ae6eb73c488c18861ee2d0ec6b2a058fa7259ff17","dd6255aaf7c8114bddc5f1e003a8869fdce442eab7e68a185991db8a5dfcbeca","3dd0df3aa4d54a1f18105ae8426c289b2385d33e7b5c455288c08274c2c3ddf0"]
Anchored: 2026-08-25
Public log entry: search.sigstore.dev, log index 2582684999 · entry 108e9186e8c5677a2981…
Expected log hash: 2b8ebe4eba52e1c2223ead6031d4eeeb67d9ae021114f03e62b1ecdd41675bcd The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record: {"dataset_version":"v1787631865749","kind":"published-quote","locale":"en","page":"product:infomaniak/domain-privacy/en","quote":"allows free use with this data privacy policy","rating":5,"review_date":"2026-07-28","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.infomaniak.swisstransfer","v":1}

Verify in the public log

Open the Rekor entry (pre-filled with this proof's log index).
In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (dd24e9f4e2c1…), which ties this proof's root to the log entry.
Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.