Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“J'espère qu'il deviendra le meilleur gestionnaire de mots de passe.”
Google Play · 5/5 · 2026-08-12

Checks (re-run on this request)

✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
✓ Public transparency log — Sigstore Rekor log index 2495157846

Proof data

Record hash (SHA-256): 2b286713ac8822c859f13f0ef1b648a2c5a93c1fea444de14adb3c9fde0fd434
Signature (Ed25519, base64): /CJiInybufdcCqarE9tKdb8irA9Hv1mjqHFXXVUw30QhqAZeHsio3ns3pLWTB6RgaVPn1IOnBn2Eca1uxUuLBw==
Merkle root: 5f465603cfecff8c631b83258a9f794433a9fe1f55c92c7f2359c24d5239d7f1
Merkle path: ["2b23f794d79a43bed8fa615a3d6ba47a9e162814c4d78776e7e55402531f67fe","7f2ab0f55cbfc35a4cc842dedfaa74276e9a4bdd3a93bab1bd82b349f940d2be","7e69857564d3c74d53c01e4f683891a41ba551627c5bb1dbe4ba0c42ffa16c34","dbc0e6974fc3ec1c5261f6d5beccd1126fbfb1f8b4a2ce7e6c7d8385d49ff186","e2561311ada9698e957cf5a766a4fdd620ececbaa5face8a3ca318247cb162c7","a75bb98e6c369760d81c01007f20603b60e54191eb8d874110c0369d16a77be3","c4eb4c561518a193850f336a5dc7d0a76f1f3d38a24454564c32ae68326b404e","dd8283bf133d414a2bd3c8d48c1b152ccaa2f93c802c9ee9c7f8f4754fab66f1","6c9afc6a3403efe1e937280f2e0090ff769e6190cb06835a2ee7437350cc516c","c468c9e9bf6fca2b087edbf4b6565c17ac3b8b2c9d27cc8b1ce6ef38f2cd06ca","598ace785bee2fdd6a2b14fc058570bf6357ccdc3a8ef9247dae1ffadf29b8b3","7ea6d2e90adc4cf73046aede6ebcd2b228ebb39afdb090f404293e480968318e","f263180059cdec95b93f28a9a635234e8f009df51d66181b902844414d966b85","3fb39940a6132e03e4fff826dda6ca0582558fc639bb5eb857201917cfd7b8b5","fc87a80257c5f9d9cefd8e12d2bc08e25e0ff70c414cc5debe7f697d0b1cfbe6"]
Anchored: 2026-08-17
Public log entry: search.sigstore.dev, log index 2495157846 · entry 108e9186e8c5677a0eb1…
Expected log hash: 3272f4e3e87c1e1bf0369f64c72e7fc63fcfccb2635eca462b023cee408b7ecd The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record: {"dataset_version":"v1786935515462","kind":"published-quote","locale":"fr","page":"product:proton/proton-pass/fr","quote":"J'espère qu'il deviendra le meilleur gestionnaire de mots de passe.","rating":5,"review_date":"2026-08-12","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=proton.android.pass","v":1}

Verify in the public log

Open the Rekor entry (pre-filled with this proof's log index).
In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (5f465603cfec…), which ties this proof's root to the log entry.
Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.