Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Superbe application.”
Google Play · 5/5 · 2026-08-30

Checks (re-run on this request)

✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
✓ Public transparency log — Sigstore Rekor log index 3084008230

Proof data

Record hash (SHA-256): 340261ed954387ae3480d818e069d9f1ef488a94ba74de7c5aa1d86465452df5
Signature (Ed25519, base64): nH90cEep1HHW/V1QY0W0/FATzeHWdtUFtE5gsuHi/1aeSs1otn1x+nH26BJoSSaQt2RA6guCZ+Nj6cDiJwWvDA==
Merkle root: c954f278b03f0ddfeb806da3192a945ea74ae5ace31cdf4f5c03d62f9b9c9c85
Merkle path: ["3403d356c2530a2700ef9527e4f2e70539a2fcc15ead8b1cdd0d5e607773a25f","71783248d6e0899c82299a32e12aefff83ceaf0868dce0a7525fe47e71f9de23","83162e9c6cd27448b3c0a33dead78136567ec9b3d70d04acd3b262a251ae4208","478873a30a5a159e6166322a967e45f82d3d5359ef7e4d075f915ab8fffb7200","3ebe92b64d71996a4a86f1a921c5015bb2878f79efbdcfa0530475a481cc14a9","537c6bd599694b0c67934874ee9bf3d190fa112b471a185153b720cdd693d76d","6c2e66965358d8eb49f809a6609213c929c147ea5ec0c99232f3a8fd8f02a223","f381a0a33b81e94df3b96989bb56a59f526afb2b830eded66305cbc8f71e0f7f","77280a75405e5ace3ca647c61c1f871fa9436dc636dd27839c202ce9711543c2","43feba2c81d54b510f6a791de74f70e49c2b2d59a23d20cec4f12fefacf45d24","7c2f01a72bcfe138e5c2705862eb8c08ba2ab74ef4c27765544466dc0bdb8a57","a7bc10fee28f2981570ac167ac37dba5147bd7749c0ca1ebb5641065ceffd258","cb9c27e685a1a40adcce5aaa0d4ab0bc7c89b1edd82b7ac213f34036ca479ef6","47f7935efde5c1916b9700110a56050667a486da6d01efbf1be7671f42769e58","2d9d4b958999e2b40d6b124a0a8044720e0313c217d237832e6b1171798873d8"]
Anchored: 2026-10-05
Public log entry: search.sigstore.dev, log index 3084008230 · entry 108e9186e8c5677aea31…
Expected log hash: 6a8c2df90f09571413991731949dc32a09a60f9a75e1342827498da2cbeccca4 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record: {"dataset_version":"v1791183579482","kind":"published-quote","locale":"fr","page":"brand:pcloud","quote":"Superbe application.","rating":5,"review_date":"2026-08-30","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.pcloud.pcloud","v":1}

Verify in the public log

Open the Rekor entry (pre-filled with this proof's log index).
In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (c954f278b03f…), which ties this proof's root to the log entry.
Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.