Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“The kDrive app doesn't work at all on my Macbook M1 Sequoia/Tahoe”
Google Play · 3/5 · 2026-04-29

Checks (re-run on this request)

✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
✓ Public transparency log — Sigstore Rekor log index 2582684999

Proof data

Record hash (SHA-256): 0ef697cccb866507a76a0bd690d8c6f2d094c77018b8fd0dbe5682fbab773dc2
Signature (Ed25519, base64): sJ9co98cLmAeBZLDeLoEF+XV2K96bPh4bxMaja2gemoBO5T9xTHlc//oZzywX9jpFhO4JintnLISIaV37Gz3CA==
Merkle root: dd24e9f4e2c157def3e88a505d0f69726bf8aab26b1f5c4272da69b916c6842d
Merkle path: ["0ef7e747c9db421b7f51803504ae1c32766056f368d43556914ed4c63748b7e8","5d81323a7d39639a664e7418a92499446027e40e6210973829fa3714679ecf68","ed21348f45665435f5801d3273f6238477f60bd34d3fe1541897cb6faf0537a5","3409cc6b8e8d10d1a9c34ae8ec101b570bfcf3ba1d077acaefff32512f59330c","22790730763ceb5f08faed866b1a17d628fa9d0173343b202b4660576fdeaefc","949757c9e193617300ba332aa511105000755dbd485d4922149dc3a407751bb2","9ecd69c806cb2fea185a546a659c1d3ac9cea9f2d9dd14b6e8777d42d43b4e32","a4920ad2917780c1e6168ccaea5dc1e23c78be54a8123d383eb50b91c2e0a4f4","efdecb6ab9f56d2ae6b70d807e5f09345e28bd1950c7ad9a2b94b34e9d855f2c","51e19f3df6738e183c47064d505ec3bacc0e38f257204eb7dc810e2f86d32c55","7b16fcbf4d88a1f5f59fc35135762c1f0672ac94b744aeaae2d1f90f53170a38","f55d259140b1887f40efd36dc62d4702f641032856993f66621d17ae5fdbb64c","7e11d89f2ffe47873f06394ae6eb73c488c18861ee2d0ec6b2a058fa7259ff17","dd6255aaf7c8114bddc5f1e003a8869fdce442eab7e68a185991db8a5dfcbeca","3dd0df3aa4d54a1f18105ae8426c289b2385d33e7b5c455288c08274c2c3ddf0"]
Anchored: 2026-08-25
Public log entry: search.sigstore.dev, log index 2582684999 · entry 108e9186e8c5677a2981…
Expected log hash: 2b8ebe4eba52e1c2223ead6031d4eeeb67d9ae021114f03e62b1ecdd41675bcd The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record: {"dataset_version":"v1787631865749","kind":"published-quote","locale":"en","page":"product:infomaniak/kdrive/en","quote":"The kDrive app doesn't work at all on my Macbook M1 Sequoia/Tahoe","rating":3,"review_date":"2026-04-29","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.infomaniak.drive","v":1}

Verify in the public log

Open the Rekor entry (pre-filled with this proof's log index).
In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (dd24e9f4e2c1…), which ties this proof's root to the log entry.
Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.