Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Compressed one file and then wouldn't let me do anything else because I had to pay.”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
0998a089cfa9a4cb6646782ac248b84fd0024cb1efd066658989e8d38bf147f8
Signature (Ed25519, base64)
vPF61nt0BeG5MGNYPEOaazvBGNQmXesvvP9/1yuHs5RjgjXtGzOKHE4AM5E5WsTs01vrFEQz/vvtHHX2QH90DQ==
Merkle root
4fe8751e7d70c50e0cd3fed6e9eeb32edf31f624f79d82d9ec3817eddba7a9fa
Merkle path
["09986a46ecfc05706f2c1c59f3644d57e1585cef7c4addc6dc72d16a5f78ae17","b42e9e6c840c8fe0cbcbc16d3f3c057cb5bb6ecc42c189cb986dd1727a508ce7","f45adeee2955a4d61da8d21e215a8cf0884917b2da42cb1653bb71f79b11e08c","272fee5e6c0b1ea25f8afb18981ff6797aedb1ebf988dabe2583deef63a8a84b","9827eda7988435cdc7a843e32e1242f745900597c06a56e8af3601950281af5e","4424c4834a7cc284aef19e67eaafc8966987041c85a2bacac78c4dd362484151","5589b1dd58bea80d2e95b952b1dbd0889503fcf8766b34439cf70ee728c34181","2aa9184aff83a1bb7b2297bca2ee14400266a173ec0bb59ac69bd3e220cf3ea0","6273a0edc5396acd08fe0d78036079969bc318ed4f280229187a3bae1573e0bb","7fc902dd24541fd768741c3ec0365b0eb2222ef22f88ddf29fcd6bc121b434a4","55dc0b56a224978c1af45f2765d47668d33ca5f995bcab2c5c0e64196e69b5fd","e156186e749fd94aed5a129f465f57a129de76642c7051b32f1250d1a8accd6e","ea18abb121143b3c16bef9bc5a13c470f569c0ce0991c92429fbf586994f4ec4","b949a5b1fe3c5409c484815b6b1e0675f1b11819a9236a5e546056d1971b9a8e","1d8f51436982e85b24ea8b1426a5f0ee7a81143ad75096c92a05493708dbae01"]
Anchored
2026-09-02
Public log entry
search.sigstore.dev, log index 2682933759 · entry 108e9186e8c5677ab48c…
Expected log hash
d15c976489915f93c119ef146e715f5c01d5064a289c9ac130af05811dc83d56 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1788318759763","kind":"published-quote","locale":"en","page":"theme:smallpdf/billing/en","quote":"Compressed one file and then wouldn't let me do anything else because I had to pay.","rating":1,"review_date":"2026-04-27","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.smallpdf.app.android","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (4fe8751e7d70…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.