Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Une application de calendrier fantastique et respectueuse de la vie privée.”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 2514629481

Proof data

Record hash (SHA-256)

1ecb10778858e4205c34d0fd11bcef86718113e33c35282769a0c64e2581a3ed

Signature (Ed25519, base64)

iCjsZ5Z8MxLx5EC8D5SagbJIr7QKlaHrUFqV0zHfLx/p344ECCSUlevrBRCj/8DQovK37O4CYcs4DBjHS7lyBg==

Merkle root

3aa12e5b2bb49befac906908c9a841e9a421f12d0bee8acab9c1f906487adff2

Merkle path

["1ecabcdb89c9db20d0b2e71bb1c1a8e690b178c138f8dd564fb81b3859bd4275","bd558f0505cdb39856d58341f55dae8d5161465c5c26e10c39dbb62b97151bdb","23f2926a6f2c0207784d85f98df3bd6fc7983dd646f8cbdd38376c2f779bb32f","f1dc5ddda7a6445b4cd9fd555c1b527aec1449c427744f47634d5dd8b280653a","d0ab0b607622da1ef4b4cd306915ffac2155456dfad60a2fec161793f3df1733","f1342139b8c77a5d4300ba57e1494af04d905cfa2001d69de13ff2ac5bb1699b","bd2b0b407ad22c9b78e04f3c116729e98ff20f2cc44a8320c079c034fd3bb052","f646375b79d00f587893d05c0abcb4fafd6716c31a0dd73602ae828796f340db","411fff7e19c8e6d09f0838aac2b12ef2a57a93e6553f50b10a570b54b60cfb52","be5a0bd0b3cd412a90aaf1dc7dbc7615811a3f8ce79bfceb2d73f464a12e4a65","6268945e9849cf805ff520997e56f16add0a9e2120c6eb4f4ded7c07d7bccb7d","7145a25bf2e4d5b12b2e2be0ac0e96a9eb61682d26d172b63f2d28df120614e5","499751eafaebbd34bd3075e397b2751a5b4f4ce58d0c2b3e5d8399f6706fd4dd","c3a6c334f1acc8c0b843c5d43c85ce54d647d519ab035a8287aee565097a2ae6","6099970369039e9ea9943621e6c4ddbe6cf64be652afb6debc70debb01455286"]

Anchored

2026-08-19

Public log entry

search.sigstore.dev, log index 2514629481 · entry 108e9186e8c5677a8c32…

Expected log hash

d923130994e40329302180560c0ed5b43e4400136d037befc932b83910626f34 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1787131980797","kind":"published-quote","locale":"fr","page":"product:proton/proton-calendar/fr","quote":"Une application de calendrier fantastique et respectueuse de la vie privée.","rating":5,"review_date":"2026-08-05","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=me.proton.android.calendar","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (3aa12e5b2bb4…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.