Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Exzellenter Service”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 2631896876

Proof data

Record hash (SHA-256)

0b593ddeff93f3e8c5362bd5b06dc30971b79a7b635f2ea18e5ecaf156cc434e

Signature (Ed25519, base64)

r3Zz9gCY2kK1PKXJInKZvv59Hx6hEmY93QmTj8fOJeW61wYxqfSdWpKQZ7hUEhLAReucFfZ6nXZCn0AvVrCZDQ==

Merkle root

4553ceda64e0f7e200f881e3be80f06ad7ad366bd41ae2637340e201b97fd992

Merkle path

["0b583820a32473f6fb8759aa8dcf0d20297fb67209f2261e8abe29220d51e9eb","2fc74da2e6d03a345a480651b185480ffe548dccc460e4edd2561daa6be5193a","c852b505bc386344f824559d66b42e6e53b0de0e01c9821d7cb32687c5856b37","3a7087828ce4d005022c19bc282522d46ad1c6584a04c534bb84c73b4beb5ad3","8a3a3916fa3b310c2283f3dfac6f8401fce627f682466007b9c13835b06980d3","92d64741c8c629c27b6c8ede1021531d8909ee31e06fe68708916d5b197206cb","b2e15079723763eeb7b99050f27709527c38c0f205e55e04d27cc2aa6cb3f81a","ba879763be2bc6affdc848e71e2e7f4f0b1acc73266ba7a544a65b6cf2c23a77","22347a0ee3f7ead0f9b32c96bb47ba324a4364d5af1e5cf373311f395c2cd113","c2c73697d624f69da5f5d439ffa13cb5b4c4a27d23898a0b75f9d91be3769ea9","bf907ab4e3e8bdc4fdff06792edd0cf49bed8f19e7ce057c3d16888d39ddd9fc","f9c3d44efaa3124514ee4c64b3279841948ff3e6efae5d5c9176edcffb63b0c4","1b9ac25bd72956239649fced74f841271bb5362800775be62c8a4c65a89114b4","198676edee22eb362b9f42be6e45e0c6688564326d7ac8c78c49d4b535692f55","a8f2b1eb226c55ba6a50b4f9e41f7daf82ed22f31e84ebf68e8ca69f1d094df7"]

Anchored

2026-08-29

Public log entry

search.sigstore.dev, log index 2631896876 · entry 108e9186e8c5677a5ea0…

Expected log hash

82d6416ccfaae92d072047c1941611dbdc6106e011bca285ba92fc51ad50f4c5 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1787970342088","kind":"published-quote","locale":"de","page":"product:proton/proton-drive/de","quote":"Exzellenter Service","rating":5,"review_date":"2026-07-28","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=me.proton.android.drive","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (4553ceda64e0…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.