Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“I used their free trial, then was sneakily converted to a full subscription with autorenewal.”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 2582642691

Proof data

Record hash (SHA-256)

12528f44de41a8a1419905d4a6de637fdb4f54e3bef5736c79dd5f34a5aa68fc

Signature (Ed25519, base64)

aNfM+QrvwZZwg4YWBU9HsveVL3ntcO57CjPrRpEx2ko4LcFlAwkadJRTP1B3TvndXZ9STuadf981VOjnJTsGCg==

Merkle root

105661e0dc11eec81116882b16fd8acda1c827c70c95072f37f1e883085582ce

Merkle path

["1252debb55197abc8c9b69f76ea28765595c9abc698e1effe74fea27a051697c","d064042cda69458634b67c93de2d9628de4ea1c7425b8a7c20d18fe63b0f0e8f","12a3c20881d132c381a7bffefaee5923a0997bdf2dd6fdd66de00dd70738a926","1386d381a52cd77bd48d428f10d9b119cc1496d0ac83d0267bdbf046bc76f8e9","bd2488b82ce94943cacd05cf762e98bbae887303adb2d0dc11bd12f4455d2f0d","dc11ceb6769a245c929856b8ea6c53abf2d7a34e8b5823400acff92a3c15da3b","69b4b972471a779793bab6736b072c1de28a33aecb28f85dd55212b16fdceae9","ffacb41bc3da5e797c4445b0c289735d5b8270c70d7966c689b7a5b879d6c552","2f41fe6885ca406f3c72af9bf9aa84e96f1de14aa6746ac5310045356b94ac09","612224981b382be1cebf60ba8a8589faa913041bc2d5a93c80212dcee729067f","6b252f43d4cc12603bac5935fb7ed9c77854c6f9dd3418fff08118fd8ac96fb3","7abb68ff7b8e6058b9df117a8053b5b61ef898e5c7cf32b89c5171c046632b99","a13ce97d602a228d6f3744d88932177f5fb29e4b2aa193e896f5d2f631ba583d","b7cd78f72e1ff3ed0e5dd5efc148786b24a846e3493df91cde1b58dbc82aeeb4","caca5e74ffa93053dd1e9893a23cfa4dcfa7162e5f4edbc1eeeead1d2f6b0466"]

Anchored

2026-08-25

Public log entry

search.sigstore.dev, log index 2582642691 · entry 108e9186e8c5677a5752…

Expected log hash

27172a9fe70fe428b6fe8e826e1330766adb69879c24941ce10f104786789683 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1787628738977","kind":"published-quote","locale":"en","page":"theme:smallpdf/communication/en","quote":"I used their free trial, then was sneakily converted to a full subscription with autorenewal.","rating":1,"review_date":"2025-04-18","source":"Apple App Store","source_url":"https://apps.apple.com/us/app/id1485259500?see-all=reviews","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (105661e0dc11…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.