Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Ils ont été très attentionnés et utiles concernant mon problème.”
Google Play · 5/5 · 2026-08-12

Checks (re-run on this request)

✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
✓ Public transparency log — Sigstore Rekor log index 2514629481

Proof data

Record hash (SHA-256): 3130ce614a81bd67d73042ef2d3bb5190f5b507a1de4b3ac69d91d836091c748
Signature (Ed25519, base64): VwRNUxc2tlZl+z5nqbQpJVwFbzLxuvY3U/8i+9BajTFXQ/u0gue1Ed1yClfUnc3DTNkbWp093UO6rcDYjMj+DQ==
Merkle root: 3aa12e5b2bb49befac906908c9a841e9a421f12d0bee8acab9c1f906487adff2
Merkle path: ["312f387d9073597fa208592a36c5dad88bf6c437d57d08a1d9c59f50e9ddac94","7b9ce31cf35bbdba905abed27f01f3fcf5f8d1de5c20d306d8099d0111560dc8","9374142d9fb860238f93ddd1ae6017c64b8b2796531704ca83b5193244bab095","db3350bee89d93244c342631ce8f4b5226d1b79296ea7535ea220301ac45534f","67bbda0850a8a36e01bcfceb24ad08810a3b5d982b5c713197ff4165c8dcba3a","89f4afdc15f897369eea27a8178b676c73fb6d2cb6409b560deb021e00ccdd7a","de3a11dde43cf350f00d3be16d2edce8670e175600b5c4f36bb245b5be6d1a38","ae19245935c15ddb191dfe3327a8ba6dee3ce390ac0d66b6bb0000528f822f8e","ed62a472103d43e71f9264b50afa9c7237b83bd02c6f8e69f8a649653e8991b0","7d45d2c9e7fc21890331d925d36baec9259c1a0a87273ddc08c33c58e17c41f1","c8d60862b4e86fe489267adea81131a7e5e3a271455c67cf574c10273904c2da","c10bb5f46eb36cf36fed52cd233de54b10d44a15ea6a5071510334fc522f0f27","a0680e646c3acbbabfdf8601219a4845c3cdf4b239e192c7eaf9f8e26bcf7dbb","c3a6c334f1acc8c0b843c5d43c85ce54d647d519ab035a8287aee565097a2ae6","6099970369039e9ea9943621e6c4ddbe6cf64be652afb6debc70debb01455286"]
Anchored: 2026-08-19
Public log entry: search.sigstore.dev, log index 2514629481 · entry 108e9186e8c5677a8c32…
Expected log hash: d923130994e40329302180560c0ed5b43e4400136d037befc932b83910626f34 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record: {"dataset_version":"v1787131980797","kind":"published-quote","locale":"fr","page":"theme:proton/service/fr","quote":"Ils ont été très attentionnés et utiles concernant mon problème.","rating":5,"review_date":"2026-08-12","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=ch.protonvpn.android","v":1}

Verify in the public log

Open the Rekor entry (pre-filled with this proof's log index).
In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (3aa12e5b2bb4…), which ties this proof's root to the log entry.
Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.