Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Dommage, j'adorerais pouvoir me passer de Google Drive.”
Google Play · 1/5 · 2026-08-09

Checks (re-run on this request)

✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
✓ Public transparency log — Sigstore Rekor log index 2495053720

Proof data

Record hash (SHA-256): 2fb690b85fac4987f6c4b696189717ecc52693e5e3949d869f4f053c1bb7e133
Signature (Ed25519, base64): 4XlGFeuMXYL4M/tiy8aCNjnl5/dZnbXIcunM8aqBZZ+Lp36dhDay/YLR5IkXPYCvF5pZnL3YBUZMYAs6wYwlAw==
Merkle root: 2a2a7512f4cd1b2d7f9a14c5eab7134b14600f50da8f4370f00e3d07bc999793
Merkle path: ["2fb46718ef5fd545d636cac20a85cae327c1757054ebc16f1563746bac9e5a12","9127f4ac4914df9bf4b284f9242b8f52171ab6f3f797994b7feaa6c96ba80186","8d5c2624016048896c3cc30ab99348dc4ee8985eefbe9b6faf20bc92339b4000","5332d435a6bf45a61403c084e22b461f26fefc4aa5852f17017150d55eac3791","fd469bdc98dd50f6830fdbb03d0b4cc98ead4796aa9cb703fe999fb26cfbaf6d","4e8950fbee4dcedd9d787c71a9538d4da7bdd30d5ce8fa54e305bc8a78f50a81","7dd3597bcba7f2f37b416ac9b1b18653c4952717a74d141b91f6a1a4865e9804","5ee621f5542f9ac248aca88f3242e84488bd579fe1da6ee8b565c81d832a9703","246befd872a72a4760846dcf0c9f48c334b18184ef01c8904ddd91f5815a4242","95628cf9f37d3f37a25d4a766fec7b57ef91cba73dbea58f2f0aa647f2a131fa","a0a1676c12645f2147a72f1f4d6b1e65ac243d6ac31cee3727236b82a6199c04","f725609c8151718fef0dc1c6e7e63f03f706174b73e17da9122e9e82b68d5891","ba76741958cd5d10023d06fae1854e87ca4f7796e3b348ef0ce4e28fcbedb31f","050f107cdb1609dc86518317886321e69049b34a0448f95e4f79cacf68b9e781","01b2a2b6a3360163596fb2e0a65565dfe0e65177610b2a84b39de142f1dcaafd"]
Anchored: 2026-08-17
Public log entry: search.sigstore.dev, log index 2495053720 · entry 108e9186e8c5677aab36…
Expected log hash: ed6074196ec9b1cfadaf17693ba1200791d122c6ee9d44d772fe27e3b176290a The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record: {"dataset_version":"v1786933230052","kind":"published-quote","locale":"fr","page":"product:proton/proton-drive/fr","quote":"Dommage, j'adorerais pouvoir me passer de Google Drive.","rating":1,"review_date":"2026-08-09","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=me.proton.android.drive","v":1}

Verify in the public log

Open the Rekor entry (pre-filled with this proof's log index).
In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (2a2a7512f4cd…), which ties this proof's root to the log entry.
Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.