Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“The application has a point on functionlity.”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 2621780523

Proof data

Record hash (SHA-256)

12918e43fd680562e11f6ff578ed689ce4765b32b3eaff5d74da97318b17d407

Signature (Ed25519, base64)

pO7cYKSAIaktUvjmkgvVpr6F8uQQULP3UOvrCtNikyUCWjHrkYHmZeaSmUe7vp8KI5tfNvxAld+KF1K3oLT9Aw==

Merkle root

7b426d9a8e4778c60509753003c7b551184ce3f76e1db9b678c604656c147d81

Merkle path

["1298256f63d1940a8703b056138e6e0efcf5cdb88ed0b9c02f27731bbf008ce0","a8820136a8932cf19656fc1a908abeb3da4899b239eaf70227f16c6f2eb523de","b464f59697cd48f27c200753442d06b16e3ac31915230e02aebcac5d500b01c8","59156988db4c5f2c8f62d77fb4361b2b4576186c8aa067a2335f384c38c7242c","d4667fda63baa99a7d5a558d286f44bec6350a7b970df8a5e1c7ece00042f7a1","139e134ca46ce396c243e313a864dad5e6c4483f47ae0f1043ad071c46a5e99d","6af7520c8477f3cc1d0f77a97709e8e070d452dfed38fffa6f574f4c828bfa14","4407e2a84ff6656916887fdf865d72bc00b45afe7f2612978608f0c3b933fcb7","35a74429cc9abe5e990de73482d51374e12edcd0c7c09214fb417ba7f50c40a0","bdc7fad568e6303001030496b2fec8e73e747ec9917e9f7ebe63ddc739b9840c","6017d77c12c9fb7066bfa482470458852e46e19bf72c24781b9bce1b1de98c70","e31d08beab788c5204f71c66f1aae19ccd2f41215c44b660d35802a0ef79d3d2","5d99da9744e8307e1a97e2467f68825a2078c23dcc4b995c9e783f8caa323115","9116af6fd18052ff80cfd3abad6fc438171b3496be1f90c0fc1ff476ae16bd31","6fe79142608c1fc8bf2fc6f4e46810b02dde5a2430135fbb3f3615b6e79ae38a"]

Anchored

2026-08-28

Public log entry

search.sigstore.dev, log index 2621780523 · entry 108e9186e8c5677a0666…

Expected log hash

8cedab57a40119bdaca7f2b5c6cf9bb1e2c3e69dc6a6b7339d16a6592c70750e The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1787891923870","kind":"published-quote","locale":"en","page":"theme:canva/delivery/en","quote":"The application has a point on functionlity.","rating":5,"review_date":"2026-08-05","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.canva.editor","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (7b426d9a8e47…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.