Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“there's no reminder before the transfer”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 2483496382

Proof data

Record hash (SHA-256)

10fc82fd258d0c54ae5451824f7fb2898f64bd58188ff4b9f3a037ea2a08f7e1

Signature (Ed25519, base64)

lzscJEIpQ5aIZAUcfNEOuJVvcSkyi+2CJNCCPL54NkygTuX4SL0P/XQnu6QYmbQUPFTbURPp73XX4xSW3qxkAg==

Merkle root

8b5970f4b146530c341d90a6af2810c5e81de90ff6866f5f7ab1feb7b3b58339

Merkle path

["10fd6c41d71ea9f97943442949c4bd1bf9501277756627e20ff6f782d59afaee","b337fa3bb140ad9404f12d2608304763054112b83ca71341bd6e03165ba2c810","1cc9f19e2aef41318e5865882fe5d80c813bc0a6bdd84d153db92c492126f3dd","1e765d11f7b410b73845b01af9732a5c83d0b98465a94d8308026b404f9af922","e00d9f37de4098c8f708285b70ceb9855519e42479a1700329fe0835fcbb3635","96b5815dc5db2945467f53eaeb46af849e3814237c932a0c51cfdd066f4185d6","524655d324f58311fd0d2fd83bf4694a4cddd2299da021b21ba91732b2441596","d0d06f9d49e3b16f10061124e2406360c8a94883909583ddbc713bb505ba3f70","2184b93a4c923dfd0f97ce79baa3908fd9ae2b5c4471b822a56e35709222b6c1","46b242480c5b0bfa71118887101bf1aa3bc42af6e6fdcbcef9515516aea01e07","ddf6a614529feb1d664d5804a5e7f29b205d3e127a4ee07a4f8f2f5e172e2d74","a5f9e9776da24cf1d72732dba510c24b49ca2ec73ff090e98d3dde783aa83a64","8b569dbd35e16a3cf6284fcb35d07452e370b6f363612f06f907e8dd9c1e09c5","e10016342536fc9141a66bbc7dc7af86f923fa1702e2584c59b9c89c4f07f20a"]

Anchored

2026-08-16

Public log entry

search.sigstore.dev, log index 2483496382 · entry 108e9186e8c5677acf0c…

Expected log hash

9e156a9df8edbfe61e2aac6bdc3033ceb5ecaf971b297c4e0a7645214890c65d The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1786848988221","kind":"published-quote","locale":"en","page":"theme:smallpdf/communication/en","quote":"there's no reminder before the transfer","rating":1,"review_date":"2025-08-04","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.smallpdf.app.android","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (8b5970f4b146…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.