Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“I have to log in to the classic website”
Google Play · 4/5 · 2026-06-15

Checks (re-run on this request)

✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
✓ Public transparency log — Sigstore Rekor log index 2582566803

Proof data

Record hash (SHA-256): 18bc9ed0b926e341dc493a3335e91d6b88e019b83b61572fe83ebd32aec72294
Signature (Ed25519, base64): 9H6dRseGIqZjeh6KUU0M0N5+3KRi3Kp4vyWZ5Y4C2MbWK/9c2GxMvv48wutYByaR6sDeojf0HqZk1Ir3kHA/CQ==
Merkle root: 6a443ec8eed9d782158d739b7e41ec6a701af29f823a7ab1de64875ee7b0c951
Merkle path: ["18ba038f648fd8eae63353642cfc73cad50959ed3fa1ebdbb4fb1c0843441941","c4fcb9d5fab22543760025b41b3fb20fb27ec17e5b83afb9778626e816f946c5","d9e1d04c2b6e8156e74e753f366cb44dcfdac0ec05a8239cf7068fb12df2d9e1","9c39d666700c043297871c710af5561a168f01f841a489f8c7be7bb340b5d19b","b0bae58ea9a127a04c6aaf8c7cb365e662f005a420405bf7ae900d450337d741","cdb3e6392d17ba3be3836b6c211cce2344befa2b45b99334e9d13228b78415f2","984ce5159d40769f027310fc41817b1c61348fc77bd9d24e176f9eefaed07702","ee85a73d5f38e1008c1a99c1f1f386d38c73d6ea12a8e67817a54c39a22458d3","13a3c0651a661ad221e38d5116c9ea85c44758ef410a6690781cd195083d6f6a","4132f24a8b9e78ff825b77cec3a4d15319b2db89c69b6918a1d1f6df2643cdcb","1be49c14c127483b2b3e086a5f0dfcdc51aa7f16ea923379e6183d63f2f397c0","d1428aa021f92df023950d5f7db3ea57b9cafac4dd436d734f3a48bb3b809bb6","29476cbfe7722f8e2598a733d0ac1fbdb48eb18b1f5c573ba269ee97e9a0fc53","b0ed18eb18040acb126fb105dfa9a6793027076086da4abb61b60f692c09e709","453a3492a63413cfc9df7cd796916e7949d5f2ade376044ee3eeebceed9d4360"]
Anchored: 2026-08-25
Public log entry: search.sigstore.dev, log index 2582566803 · entry 108e9186e8c5677ae2e5…
Expected log hash: f4f63b54e78de54106e8bd57b374f79ad9ebb7e6cc5e587c172fcadc2d1a0c5b The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record: {"dataset_version":"v1787556373580","kind":"published-quote","locale":"en","page":"product:infomaniak/site-creator/en","quote":"I have to log in to the classic website","rating":4,"review_date":"2026-06-15","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.infomaniak.mail","v":1}

Verify in the public log

Open the Rekor entry (pre-filled with this proof's log index).
In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (6a443ec8eed9…), which ties this proof's root to the log entry.
Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.