Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“kindly refund my money now”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
195604c8ca7bffd6950d84bbbfaf5711781ea37e638bcdd17823ad1947b130b5
Signature (Ed25519, base64)
zVrbGHfLK9hXnVaas/ZTLJ5p1fIvUUsZLen1WCbgBxQaVHe9EBJXAKjn/+T3It8uDz+GjcYL/e8mMepsOiMqBQ==
Merkle root
4814209eff208716b4535c2b0fd0b03895bdf3189545e82450cb75591e4887da
Merkle path
["1958c924f260a66980af1d5401e695993fc03a869421681e1399686253b060df","789a963d5a668089c96d76e7d6b3f5c3d849df17e8aaa77ae087b2ecc45ec881","fe12993eb70917c150a341824d9424e2e7d5fbf2b132a8f964d7aea3beca0279","01fed0b906698925b0b9620329f336649aee8b6f6c6bf568829e91463d1f9ed4","7d98e21ce1214e8a873f4c76ee6d6654389a2f1196b19ec33e163782e7e34009","cff45b8c90efe8937befe31b62e7738a844319b357b17872f662afb577b23543","3e19ef188e6534d92d478edd4ca48fd984876c34dfc28330c258c1a6ca42578c","38f439ecac3137291bb384633de7ba6ae1bd0e7ac1f375d9375d7d78d309ad16","b799184b4e3da60174c9423772d020ce35dc3ebd40bafb5c15acbe169070c1be","d7cba57604064fb98bc8512c26732e41f3b715ed4d917760fa857380527ae194","1df2d62ddda80b02abe7e991b35ce4712b0e7ca4444f537eebbe59b1966f6274","8cf90eed3375d3679a924a8a2b362d791ba8c7de2de6786e84fbef8b43792a85","5ca41ffa95430097818b993a1ba310362a9e5fa81d44bfdc04fd6a5a86897658","4222d4cb0e3cb98443733ef8f53c14d869249278d4ea410003cf03e3a343c09c","12d9d8014c44524a8d93c0e0f1440a3071b98d9de55311024d7d505c5879a63c"]
Anchored
2026-09-01
Public log entry
search.sigstore.dev, log index 2671265667 · entry 108e9186e8c5677af0ff…
Expected log hash
0d4aa038b3cd3d7cc8a3744c8157ddb93929116887b29b6be030d34102a7e419 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1788234112368","kind":"published-quote","locale":"en","page":"theme:canva/returns/en","quote":"kindly refund my money now","rating":1,"review_date":"2026-08-10","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.canva.editor","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (4814209eff20…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.