Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Without warning, my limit was reduced to 500MB”
Google Play · 2/5 · 2026-08-07

Checks (re-run on this request)

✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
✓ Public transparency log — Sigstore Rekor log index 2670985056

Proof data

Record hash (SHA-256): 0f9f0c3184f7722d7751ca5bcca8284070d7ff4f7381181a72ec8c3e5e4b9187
Signature (Ed25519, base64): 3Vs1bi99MurfABY82g0I2GwaFys/POWPmhJY5wmOc15o3keNbOa3Y/4uRt7Zs7YVZ6jjJ/R/yUFIQi8ni9/ABA==
Merkle root: fe68a9ec2e6207dd1414683dd183944f75125b6c2562f0a23abbd81e00bcd90b
Merkle path: ["0f9c0b743a7072fab007eeae6f952cc4c50b051337a0eface8f1a3c6dcb6eb61","0d567de5423d126cc6f777019eb776d51253f7c725f713792c056a955b56fccc","3c58e4e34b8ce4ba3450131a6d5cbc43bb4768e3f3b4a85166e4d92353c2cf2c","66db7f9dfb3d67711b9f790c9f737405763bc9828c7fc3720d5434d484beb8e9","66c5ee313a835a586c4ed4b72f0aa75da4c9384af3d6ea7096754fc49a6428a5","759aeaa2ce138983b9f6e1c53f38c9073c74a420a628118069347d5aa8420e26","68cf746aa7cd70893abf1dea3d272247b4409b6380961c5cdcf2450d420416bf","6e9c0b68bad0b1a1fc3809291e09f4df78e5dca01cbdc7ab333f44a9fad7b734","63243d3dee2b65f81cd8c905bcac5b2b64e26fe7b066bc43f59419eb33611835","593e19f49413a34f9a1161b07d46c88a1c7460fe5e4bced4d72dfe4533694af9","89ce748d7575f44903fbea34de8090fa3345d207393470593ebe98cdba7c774f","45dd706bac2cc0332dcbe46778f23659c357900b7b4e37efa0060c038e10718a","93f00b982f24a21c93ad94f3b06a01239412d63557bf3cc0fc81e8815ff01fc5","6964472ff8161cf1d11ff1df4f1d4b619de3c1f553b29120f683f51838cd8531","eeb1d944996c95773acfae0ab38890a16747a23a572977c9c76e24b2581f0338"]
Anchored: 2026-09-01
Public log entry: search.sigstore.dev, log index 2670985056 · entry 108e9186e8c5677a5868…
Expected log hash: a3256450b43380deb044f5248848190a4a97d9fd95427998eba3c6ad83d6bee1 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record: {"dataset_version":"v1788232129626","kind":"published-quote","locale":"en","page":"theme:proton/billing/en","quote":"Without warning, my limit was reduced to 500MB","rating":2,"review_date":"2026-08-07","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=ch.protonmail.android","v":1}

Verify in the public log

Open the Rekor entry (pre-filled with this proof's log index).
In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (fe68a9ec2e62…), which ties this proof's root to the log entry.
Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.