Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“The app is good for work and play”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
1226a259f58117bea5e6a489e2f9d3b2e551411957030eb768866057dd931d01
Signature (Ed25519, base64)
fZysdBOBYjXXA7NZPmkZ5Lia5dxfy70BeNxnvH5SUtwAcKJQs4jT9o1DAaCCUe2WWyUivxHq9libG4UTvIOlAg==
Merkle root
0ba1b80ff2165a62bc9f9f25c7b671d32a81a8e4f351546efb788e090f369376
Merkle path
["1225157686d3e8f0f8c51b24860a596ce0bb749afcabcb18f421c8fac78d7ed2","cd45a2f55a52eef0be0793541d8f75a9390437a533495cc30fe96283172ed31b","e32167ca441d57bb9901eff9df0f3c2b44fb75c75031ab91ed14adf136653835","0db5b35fec959cc84110ff4148a945b64bb85e9b0330f5b323c406042a8342d4","bbfe4f3c76c39205fc1750b32d77fab551bec5db30e5f933e64d45f975c9bea9","90a6ddb27f4be41986e7bb9adf09a9ee782b39090dd6f2242e2d4872ac82db7d","0788aa1bde8a192139cf0c1cf4cad884c8c20dd6e672922ce2f9c3cb093e2284","a63bcccc4f35d7ff3755853383dfb5b76a09fdbc5e49e8dc228d96b530d8741e","1811279c372051643682890ae34531bb70865eace1c88534818c8cea627dca3b","6ff5ea879c6c35527c0aa44037be2c253d4663a89cc82bc6f7747c0da1e2533e","33cbb318f490ec551167ede4eb9b00971e159d649fefae9f22b109b357c3edfc","aab51e2412790f739095eae6d28bc9b4f817dba064b561c920a4f60198d031a0","034ae9d01226d77eaba75b4d19165fc2dcb9e68ed53458f6ac6eae0fdf330abf","e3bdd9cd4a46c1886472a1771a5799292b1c8a1505c3320e374180146177f347","9c07fc5299395e9629e50b7f7f3c0b3bd92e7116744c8ce6fa87db9d24fdb3b0"]
Anchored
2026-08-29
Public log entry
search.sigstore.dev, log index 2632728886 · entry 108e9186e8c5677a444c…
Expected log hash
ba382b40bcccfd5823af39360159e6e4433d6ffa61f32bd2b6c045e496d9f4ba The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787975494243","kind":"published-quote","locale":"en","page":"product:acrobat/pdf-editor/en","quote":"The app is good for work and play","rating":3,"review_date":"2026-07-23","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.adobe.reader","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (0ba1b80ff216…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.