Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“The cloud document editor on Android is terrible”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 2513934798

Proof data

Record hash (SHA-256)

1161e87b27e83c17512ef7358eb2f4ce2fef1fccc64b2c2933ed07812a28341a

Signature (Ed25519, base64)

gTBFExG5j3z5gm062ZpOowOlWbjf2eNIvzQI66ck2MBwp1ENkqyZq2e+AhmFN8vCbat9wNwwXyLZ6FKGQC8rAg==

Merkle root

0148d24ff6e9c2ab4d5b200cf436fcaf811faf144951e67c277e5df63df916ac

Merkle path

["1161dc138ca5b5b7777eb5bc7f81377cf83ae6fde01d59e658d136c883653b57","ef15e3d4e92b7bea622d37b2cdd3032fb114641dfd561a9822b97c38123c0bb6","e9e35dabdb50c7f24d5675ceee33c8c14748bc3f299dff88249c461ebbb5c783","9678839ec5fa364734bf6e871d34b8dae949b44a5c8b8184b6b9126026d0a054","5ee020bd8097c568f43a7b274db2f220370a709f38251ff3cc311e6bd2747645","51351d92a2ee89b00d7ca6f20151eebcfa83dfe1af16f2032cb756a250865030","03e5f63647407634b450215db8338404e0f06bd8ae8e6145adf24e63516b65d4","6dab1f76e191ac2a03be3d9eb54721e73900a9a1c35f33aafde51b4132dba976","776f25d3fca306f7a66e855f8ac7919396110a01e10363570c37dfb43310d93b","7f8c55a347782e391163425feee64bc30be0d2bad42e8e6f0e3571ca6555bf79","76d9a05b8237c60e271a4f77e9d858cdb2447ab2c1420f7348027be4185a5fd2","050026360cc30428b0f9f7d3fe48810eb38e0be82fe3bdc5ddd1aeca489736ad","6e682ef2f1977653a59b0ad4ee880774d1e4115b6b52f6386378633c9c3c0395","94d634e519e6d7de4794c0ce09ca16c6cca04c4fb77fe27354f6655f0f9db8fb","eefb32e3ef6dc5b176b5121ed7a7991ded7d89d0f08c50d4493143d001bfb6b2"]

Anchored

2026-08-19

Public log entry

search.sigstore.dev, log index 2513934798 · entry 108e9186e8c5677abbfa…

Expected log hash

4398d73a28baccf419c99b11cbeb8ef2e4242701bb0cc17960e1b5f329faf480 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1787122088277","kind":"published-quote","locale":"en","page":"product:infomaniak/public-cloud-iaas/en","quote":"The cloud document editor on Android is terrible","rating":2,"review_date":"2026-06-30","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.infomaniak.drive","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (0148d24ff6e9…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.