Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“keeps on pushing its products with all possible pop ups ever”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 2683647879

Proof data

Record hash (SHA-256)

1da36dab7fbcc54b8338378d789b6f76802161c1543aa72b79030cc97d4475c7

Signature (Ed25519, base64)

QRlLvEGTDHFcRXQJKgVgQ0ubvkb7HcF4YU2tLqpT+hkfOIkxqXfY+q5djG8928tHeMak3DIHhKoMgZ4wYKk0Aw==

Merkle root

2e3d871c1322192f29eecddde09b1d60f3198d79e780fa1195a664b4bd06a864

Merkle path

["1da68a4612063f5c67944db0088e8d8192720696b43c4d1f4898312168232eec","a1721f7609b59106c9bb86f665f351dd9209fd745fb7f2f2e634d68585f890e1","de60eef16f8efae54a7edd813b7e6f8171a3a09ab618f76ed956f66476cd39a9","564c4f0a334e460f40faa91fb8fc27a94a718ec7e6a22845d4c4487c63c71803","6f26e2c3355cf8abd997561532a6a5eac1276a80a41d87162c3a3ff992d54ee3","4f5384f1285653e18c983a6ab96e36736ee6c9d8a481ad98b47388c394a62977","79152907c279ae282e7383b2339d5bfcb86e28de766e044d88ec90022afe7c41","b64983690e3085f80d48a36a58f26ca830496c2aae428fdcdd2654c2435def51","79020cb453ad395d27694b269286d9b33210114d0a99972802933b175bf3bb6d","c33913986d813421d6b95bcccb85933c9a8cd6f3ef8cad3f415ab03580dcc40a","ff53934e1289f7a86fb3f7830579e88b9bc8f5dec5cb7d3384aa700f1233883b","99a75b4dd4f269df8c1c680bd5d681a11382919c8eaf3be6cccecb7fa8025947","2d5b9611d8c1e5387c2a259b0d33678f993a76db53de4243f9d133a0209868ec","628ede9e9b0730d1cc332c261be38ff7c8dd0481f36e9cb85c838852e27c80d4","8951511b8bccb72998a9f731e365024a5c886ecac866e59c397ec696591e8130"]

Anchored

2026-09-02

Public log entry

search.sigstore.dev, log index 2683647879 · entry 108e9186e8c5677a3d9c…

Expected log hash

9b4e6e5ed792dc8e5468e146cdb00002a33cda5d0fe16d325e3fdc5cc54bfd3d The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1788327458165","kind":"published-quote","locale":"en","page":"theme:acrobat/communication/en","quote":"keeps on pushing its products with all possible pop ups ever","rating":1,"review_date":"2025-11-20","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.adobe.reader","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (2e3d871c1322…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.