Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“I requested help through their support form late night of Thursday and received a response the next morning.”
Google Play · 5/5 · 2026-08-12

Checks (re-run on this request)

✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
✓ Public transparency log — Sigstore Rekor log index 2683150346

Proof data

Record hash (SHA-256): 0cbafb4c46757707bfd1c6e8ddc818951b48619df03f16928294669d5f6b694e
Signature (Ed25519, base64): ci+mgzo7Kvc2gNlV2yDU1xiFBy3h0stIuoF/uS0K/fUqi2Qq6pKkJmArBvyu3+HtMBnceYfBWicQZUKeWbSQCA==
Merkle root: ed1b76d4f3111cb6e235a9fe679fe4fe63795d3193935a8c023245679c12c88c
Merkle path: ["0cbb82fbd3c5b1158fe6088bf3b66658de61cb546e38ca709f3e1328429af17f","1f3b1c66eeec6d466281a0aed930897187871cdc41c3b32288f6983539d0a924","d9020ffc9b6d331b8dcd95140bcb924da49e6f9759048e2347c5e6a0562f0de2","4bab4e00b9ebe1c4b3af338eeb3264072a1245a8c8314543a39331a99e1229d8","96da357d0776ea6229840095a02b6ddb4e8327ce8356c382504fc525e16fe222","13d5172a69522a38c441a772c56db04978afa1aeb0edd68b4197cff09066cd22","9eda6264135c176e795639e941f9f8ac4b4342988ee419cc7ddd4dbf5a239dd6","1a3677ccaa26b152a57548deaf4596996f931bb8bf15b8a7277c1062b764162f","780bd509328f00fd0729efa5ad5d0dbc94e63aaa2c4aff70cdd25172b8a45a18","a6b9ae18f32db5518987760f6bd5d56c3327cccf2097aec8fd6a35e301921401","19fcfb0164ff07216f6cdafc3cae8d76bf53cfd941710f95f1058e0faa3280b4","07f7d14c8e1cf61f4c1da21e46a47631e1db47dd71d22b170f100a5bf052a4dc","d95f737cdc8d09dffb520130b23d2e91ee7119eb9a2a85d7ec6c56a05cc092d9","222137c91498adc204f412ffa9667367d79d38be98153f9b235308fff5e7e9de","6ff3db889906bd05786277e2021c1872c21f64759ecafab0fa871f6865f90ece"]
Anchored: 2026-09-02
Public log entry: search.sigstore.dev, log index 2683150346 · entry 108e9186e8c5677a5378…
Expected log hash: ce2f0f51099dd771a165694fb25d868068d124ce108279fd9df180f0ea90a863 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record: {"dataset_version":"v1788320836912","kind":"published-quote","locale":"en","page":"subtheme:proton/service/support-responsiveness/en","quote":"I requested help through their support form late night of Thursday and received a response the next morning.","rating":5,"review_date":"2026-08-12","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=ch.protonvpn.android","v":1}

Verify in the public log

Open the Rekor entry (pre-filled with this proof's log index).
In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (ed1b76d4f311…), which ties this proof's root to the log entry.
Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.