Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Qr code expired or please use another ss from another folder error, bruh..”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 2684346356

Proof data

Record hash (SHA-256)

0d617de123a418a8550748543c1c902f7e963e040967a0ae7a92f21120e0a2e0

Signature (Ed25519, base64)

MeSIbyb4QpjqfxF4xCVcMhOHl34rdxEymBzlvxBZZMrAX7S3pUDGJALHOtuIcYtKNGXsjiXnXDIiikXf32jUBQ==

Merkle root

bf06d03d174707f535c1833af2fe5d51e1d258f061223559344b34f56a1fe592

Merkle path

["0d6051fef292f913c9b1444d5a6ee682233a628e2bcfb669d7dd32074f4d5b82","ba26709e01d6646a9935eca930b4189595153461dc2a894d6f4433a98889c986","b19c386427a78c1697f07b6652928c7ebd68320b4cafe51fbad201e40bd4e9bf","77b50c68d12b60da7ff02f7137a31755b86e68a4cc1fd252761f9a3950539b11","8b689ceda87ff57096b82bd91d92ea8b26788cd9fda4f309295082189fd6e44f","ee470a818608ad44c4e52f47af09baeb902924c77f5d42e79b784c867e933d34","d09a477a4e318155a1333676334eb9126873a219ad70e131869f5e74ed9a295a","7cf773fdc4b8e7724afdbb4b8ee4c8eed0cb4b3fb21a1b88a9ffc81e96e4aae2","a8eafeb00939f404d241881ae467a3d039cae6220824c364c73a09db0038e289","9d7052cee64449e819d0c77f6f000de3fdbef0fb6dfc18059f7211ba25d2ad58","a6be24d1403f59d3416f2fc0d8d9a559de4fdc3f208deefb5c9192d1216b1fc6","879b1c993b0c0814b2a75d570e70b17b8c28d50568785d86a369c01aef9cc8a9","3492fa2427a95ac81a05d55f826772e439a4f5dbe5c25418023e367993106e04","e61e8c9172ebccf404204c12ed180f9c4b13c940a974e219cf0d945d751fc601","7e649292aa5430485d2f826d445d528f8e95727e1e2103ce6cc862417c028321"]

Anchored

2026-09-02

Public log entry

search.sigstore.dev, log index 2684346356 · entry 108e9186e8c5677a5932…

Expected log hash

21bf9008ed6eb4689ee11c1c7859f0e94084281b2b2e2088b1d7635165466b55 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1788337894213","kind":"published-quote","locale":"en","page":"subtheme:proton/ordering/setup-configuration/en","quote":"Qr code expired or please use another ss from another folder error, bruh..","rating":1,"review_date":"2026-08-13","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=proton.android.authenticator","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (bf06d03d1747…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.