Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“I'm considering migrating more to KDrive, which is stable, functional, fast, and lightweight.”
Google Play · 5/5 · 2026-07-08

Checks (re-run on this request)

✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
✓ Public transparency log — Sigstore Rekor log index 2514476227

Proof data

Record hash (SHA-256): 0fd24ce047688f30c21442b7bd54bc72a6608d138601a07cfe953d79e43647e9
Signature (Ed25519, base64): LS+djgVHpE8bKpb0dLIAP+DvgUIz3h8mi/CLZHLgAm0EBllEhwpa/NF8iYhB/jQqZzGDfzTx3WVxYbNh9htCAQ==
Merkle root: a086f9fa8309b32cad6e06b6c84c12133a405483807f462eafed4cabc6f3fb99
Merkle path: ["0fccfdcfcb96775a0898725321d104219b09e6c9ee83a9928a545ab0edb9de04","49c73978088522f80377f1ff8339c547e72e37a1fcc98d4c1a4028f7763f806c","f0959d8696303a43e36646b5a45d99b72aa9c68897a758181cd12f54185694c0","ece9aeeae8c5b305283fb79b4d5a34294183dfd179fec0eae29e414b8b8797ce","40504ab1d52f5cf0b52be929fc84faa0d511ac1a0ac5aff7f05d0ae4f582964f","d3d16589fd3da4f3203db022ef06a7938a4437d850da35ee5a06faf526a8b081","058d1afcf0399b4821797a451e75d2d7d8f81532ba7e128e1e5f7eff071309a0","efde9cbe3b35f60ddd9ca0cbe6d83961aefc4fad5024115c778cbba7c8cacf01","c6ce652b68d7143887872f92503fcd84c46a3f7df7ac251ee39cf4a1f5a9d90d","370f6c791c24364a360b83af094ecf95011832e6f951b6ba71ca8c42d775f1a7","f29fe26f21481bd7376184076349c31e341dd9d935b8fd6ce7934410d8c3c5f6","0ccf6f0495870a48fb418bb7380dbb8df9da396ae2836c877ff838e92e889b31","6524172f6bc7fc76e6e0803c488a2dc7fb1fb8c35a8cdc8ed06b91c9ec2353c6","3aaa0ca1c59e2fffb0896520bfab42cd665f7155bd5324013ae19a22f4f790c8","d4cf3fd862731bc6a1728d66b360c0434f801f84e015a828556d2731bd771b26"]
Anchored: 2026-08-19
Public log entry: search.sigstore.dev, log index 2514476227 · entry 108e9186e8c5677ab19c…
Expected log hash: 9a346357c8991b17bced8f12238c2332c4ac3078c0d9a283ee00f82b3c69be66 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record: {"dataset_version":"v1787129084398","kind":"published-quote","locale":"en","page":"product:infomaniak/kdrive/en","quote":"I'm considering migrating more to KDrive, which is stable, functional, fast, and lightweight.","rating":5,"review_date":"2026-07-08","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.infomaniak.drive","v":1}

Verify in the public log

Open the Rekor entry (pre-filled with this proof's log index).
In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (a086f9fa8309…), which ties this proof's root to the log entry.
Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.