Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“I want privacy and good assistance.”
Google Play · 5/5 · 2026-07-27

Checks (re-run on this request)

✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
✓ Public transparency log — Sigstore Rekor log index 2542751096

Proof data

Record hash (SHA-256): 0be9846e7a0a194e9486820d3065a88ed044d129c675a9253254f9a6e3fe9270
Signature (Ed25519, base64): a/HHeVxnt8bKQKfryVfkQwE8oVQE9U6s4ltvG6iUId7mMIqGTa60BJzrTqfeQE6UEqnGyfnpMNZNeZpODMv3AA==
Merkle root: cc9af896bdf0beb88857e1dcc841c404ccd4c59cbcb6932f17077fc8aa87fc23
Merkle path: ["0bea609afb71056cb1be657d5a04075f56501aeb6abf5751dbc2835dad885c51","1dac06dcb18d10ccd35239d07c70a4ffc40b88613ef630d73d5d719b1547a040","bcc40601291437639d41ff8ce6acbc9cd0b4094832ec5bfc871a14b2418a414f","4d4464e277f3f03c2da3773b29c0d0454415b21991720d4a0abd833600efe197","c83d54d9b3107b2de8d037ed8e024402092d3c9450a4243ec6370c310fa4bfb9","ce8565d5619d89fe43701098d896c8ed4b50885b8ad9512ac061de44eea9aca1","10cce96c5e9b8dfb5a2dde2486a1f59c0e5648595b9d8e06684a1e6bd583aac0","128f0e2da60abfe4a99e62a5db91f12e1660ba9897a2532733e05dabb49e302d","0ea4803f7728f53a983fb67ec55c7588364acaf0e3c637135c2ae365a1e40162","3031aafa0e6c082e413fe6ed9bc80f2cc95191b3ab0073c2af3fa222b70647cf","fecc5e9e30221291003d1a993aa8910b3659fa173cafcfbd67671f76ab66d39d","1c2809e47d2975b766ef995b7d10124aac0516db86022be7da7348399138c170","4372dc9da9497fee58c424202bb40227ff1140a098c2b49beac2f4c4ae9a0331","0f351cde6b1d9915cc0e417c0e2f1f0e3b04741e1975a4ad546a8eefeb399e09","7e6c62c2991c7cac05134c9f9e2ab89c75f6106f706f524eb2e9fa9f554216f5"]
Anchored: 2026-08-21
Public log entry: search.sigstore.dev, log index 2542751096 · entry 108e9186e8c5677aaab3…
Expected log hash: 8251ea19feed4cbe325f48ba93f0e47294878633f5d43178e4a3a023547e795b The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record: {"dataset_version":"v1787281943761","kind":"published-quote","locale":"en","page":"product:infomaniak/domain-privacy/en","quote":"I want privacy and good assistance.","rating":5,"review_date":"2026-07-27","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.infomaniak.mail","v":1}

Verify in the public log

Open the Rekor entry (pre-filled with this proof's log index).
In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (cc9af896bdf0…), which ties this proof's root to the log entry.
Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.