Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Proton VPN has kept my security and privacy like no other”
Google Play · 5/5 · 2026-07-26

Checks (re-run on this request)

✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
✓ Public transparency log — Sigstore Rekor log index 2685255068

Proof data

Record hash (SHA-256): 19bd3bf33f9e5ee507272766a97549367b1727c3b8b068b3b76a19bc2696843a
Signature (Ed25519, base64): SsCcvcH/8sRljiFa1mrgCGQzT9ITUhFzR5+xqdJdDh2fxKgVPcHsQBhPX5whWTonT2Z03LrNRVQa3fH17GOsAg==
Merkle root: baa63339ed127dee6c2b1504d3718b71e94c83f7a90a1da737d699c1b2205913
Merkle path: ["19bc7adbae9e695fa12f67b9dcb2efda1303909504cf54469b34c394a214504d","e1e73d98e77c88404dd8ae70bc88978277fc42759e9f185ac47b7cffb111a353","a2c21c37e1d6c7314e3f179fa64a6081f03a33f1d65c521c18c6e50629e593d1","f8fe114c0825a98aa4815b594691d12cc48c1bc129ca2be2d8b0c07b4596c7be","14993cee7ddc8d68205873aed21d714ce90c36ffb20a1281e600ad9bf7db31f2","0e6bff6cdafccdb58fab6b8d3b1d9f0dc5ac96ebaae6935ae132bb67d161474e","8d82945d744a3c598ba5a409c1bb10eeafd7c4e94fed7e8acbfb1bdedcdcfeb7","bf7366e6b07c2dd0632079a28b08078f390f12be59d29e127424c450c2c4648d","12a16ccad5b10d4b52a16cd7e29470fcf40e2cd71803771645cc3547e925d657","5155d717edc069d1f56e63961301279bdfdf191d36b7cdb9f680c8bba8f12f17","a3311f52ee265c954f72217b21942002f400b14a8125c446178305cee3e9d3ed","bf762721be01b665a467adafc2bfa206f72c681ab8fe5bde6762bd120ea2a5bb","eee880a255047d554444ad39a6fcc213a7567298f0f3441531c01029e7a71d12","ac24abf3a1c506aec2b5c0611268046e40bd3e23140aabc047f5c16f008d5dd6","11e6176a525c956e4f3a814b04624b93eb8f47dd129fbee2765869efbc5d4d54"]
Anchored: 2026-09-02
Public log entry: search.sigstore.dev, log index 2685255068 · entry 108e9186e8c5677a482a…
Expected log hash: 03e66e446ea90df8a21d7d402854ad37d81ce71c2336e953836f61c9bb1e4bf5 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record: {"dataset_version":"v1788348937690","kind":"published-quote","locale":"en","page":"brand:proton","quote":"Proton VPN has kept my security and privacy like no other","rating":5,"review_date":"2026-07-26","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=ch.protonvpn.android","v":1}

Verify in the public log

Open the Rekor entry (pre-filled with this proof's log index).
In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (baa63339ed12…), which ties this proof's root to the log entry.
Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.