Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Hello, I tried the free version of Canva for one day.”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
111aa4fdefd63100916499d908add7c80f50f15601fdb0c175a6d429e9c320d0
Signature (Ed25519, base64)
7RN8ohohK+UHo/cGqZ1f5wEF4JX5hpGxSHQ6JxjXe+Lbl/Lg0DqJ/E8R+VgxD1Y9FR4r6obtUq1GNCsdg5gRAQ==
Merkle root
e880a518ba68bfe85ddff87a241b258528b2896d8ce031c201c4697c0b7d2205
Merkle path
["111a59dffda6b535b8803c2f19b6c1e63a277551ceff67dc803e8df2b24254d8","64db0028a1ace43e99cbabaad64923069c8c1fa928bbda6a7103589bfcd4ca95","70f036101ff9ca71f21c322f54a5addc5922b17da140c12e960818a038b41ca2","405c9d5c79778adb577152e6298c79ad39abd87e5f1cc43aa5d5e5a5ba985280","551e7c5146c589a75cebd6e8e8df74c8fd79ea749cd9bef9e5550ef545e28dd9","7b7fc1be3ab3e03862dac4f1a212052a73bfa80d8f73c1b4e2cc86f6101e7df4","2b5b9a5ab53beb1a506297d8c28e502dc88b28b23f88a92414eba24e74a9decc","5a23e5d9e3831fbcd8c1cbf121497dde845e444432400ae212c9c67490aa17dd","8ce734f9db231e1ff7fed9689bc8f971d14135a448e2b61e4b3a15a4243a4230","715aad56376858d8437b61398788421560befea2e95f91eeb7cbfbf3bddda275","aa45589d359646fdc7cb3b7100f296d51531a91bb30633303107ad8c4d1f5594","8abd4d5b06b87286affaa0cf89ccbc72d6059bcba0e452912cc764aa4f8b3a91","0e6818b49626845facd47486279f7e4a6689ed0beda657d93a969ab184e1e0de","8c997d59f41540bab49c6414578aed00ec9a73fd31959523b43a0af5a2eb1e86","269c643459740a67a842bbee9fda4a35b5098a4f015e508a69431212a0912770"]
Anchored
2026-09-01
Public log entry
search.sigstore.dev, log index 2680681799 · entry 108e9186e8c5677adf7a…
Expected log hash
23ab6878cbb153d06d6958de44ea3fafe32bd61b03ba95bcd26de9e09248aedb The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1788297623062","kind":"published-quote","locale":"en","page":"theme:canva/communication/en","quote":"Hello, I tried the free version of Canva for one day.","rating":1,"review_date":"2026-08-07","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.canva.editor","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (e880a518ba68…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.