Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Veuillez rendre l'application impossible à capturer ou à enregistrer, comme pour un gestionnaire de mots de passe.”
Google Play · 4/5 · 2026-06-26

Checks (re-run on this request)

✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
✓ Public transparency log — Sigstore Rekor log index 2514602687

Proof data

Record hash (SHA-256): 23db828d77a156273633c782cba07f9aaa9331467815e9f4239aed3964c21e51
Signature (Ed25519, base64): 04hlmkPOTunMeYEH8surByA6EA3aEecGuIS0lZwMOcjPHqcHCCU9fY+YkaiEDDRA7srUW4vdb2B2fWMQMZLcAg==
Merkle root: 749703591848535a8600340214debbd99b61273e3bed402bec28b292f90ce9b6
Merkle path: ["23cd5b8c9d22e8959a67db3b6b556c1d3bcaf167c388d19a5a23eded02e60f89","f2b258612f63f3bd135f858bc48066715d4b66101e89da193ffdb768bacaa7fe","ef02cf45b9363fbad241e5a8b01d3d1318c5f1e1b9ef7b03c38cc88a4a4b8c5a","9549693700b4ad71f8c6f3d92ee432b83330590d54def2762818f320b9591e4c","3e80854b321d20eb5e4b25b7aa6c50d90cc8f18546da33349e766702a4e8b785","03cda2a88401485e23da9aaabd7eb3fab997dd219a854d2be585abbd6d22da2b","cf168e20fdb2d8f84253c6144722bc69ecf62b510abe20d5855d1888fc06a50a","1de38cdc2b93cdd6014356ebd8bf06144e4982596a83881e06ea4205a3db8507","021640b2170262882f00cb4c874ebb17d058cd833e761b6c44beba34de2b2f4c","50385e1f354b44a5bd3cd42197f7e16853255c1d45849b64ea7904af66ca8dc9","0976f7951282ec94f5d1d2d112af0d0a60341b72cadaefbb69fc7915896436b9","6b2689b2dd9d3b8915415d64bbb92b570dfbd3aeb47f24a3313b9dc36c6a52b1","34c0dfbb126009f4c79d4469e45bcea801fec7d101a7b81a66d8a0095ff6d708","f43a1936699be5b728ab2cee5100b0cce7fa6828f7bb521f1ba149ba44cd48a1","bc5d1d560a30e83fe0f1b6a9452dc46dc135b1a7f73575ec3aa5d459bb76fc8b"]
Anchored: 2026-08-19
Public log entry: search.sigstore.dev, log index 2514602687 · entry 108e9186e8c5677ac525…
Expected log hash: e53e7f935eb508100ef1046b60c784e0bda15dd54afae176c275a97cf1f64052 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record: {"dataset_version":"v1787131269839","kind":"published-quote","locale":"fr","page":"brand:proton","quote":"Veuillez rendre l'application impossible à capturer ou à enregistrer, comme pour un gestionnaire de mots de passe.","rating":4,"review_date":"2026-06-26","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=me.proton.android.drive","v":1}

Verify in the public log

Open the Rekor entry (pre-filled with this proof's log index).
In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (749703591848…), which ties this proof's root to the log entry.
Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.