Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“It's not very "user-friendly"”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
14cb675d4a1cd9f281b1c5d6ac75c954c10cb99d45c13ae69a0e01bc73ee0163
Signature (Ed25519, base64)
BFuQhj2kqcuuA1nIWWXLwiWoJjAFjrDxdLKdOXYXFsFpAMjVPe0fJnywG8lDARnjRz69Y+gc6TCCsf4deYAoBg==
Merkle root
1ee209bed1b4afeeee81ef09190ce0d3b99a421ee0d9b4b532771d9d3d94cb97
Merkle path
["14cc626132f86dcf52783c61ce05360641fada8734bfb02b79303ccd1efa7900","76fb60967fd03952a1a7b112f61e8d1a13050e07af1377116fd35fad4bcc82be","f184813f3b23117bce10690fbf35c93a5759dcbd13f58633fcbc110795cfef4a","91be5d3291a2174663a3c7db3ab26764ca17417500b3c7d027fd5d106ce0b147","b7275c7397f8cf5a10ab3a2063721ef66fe3601ba6b819f2e35062ea5066cea8","19310db64c6a2a629e2525f988eb563b346a021a5aa091c12ddf5d491caf1fcd","7ad51866999240af805c11f856540eee93936bf14861236958b6dfcf3d54be83","c66aebcc0a66455e579bc41318403fcc4bd5d5f7cddfa0abf41461c6deefa1cc","2eb52d2a43821b3939abad6dc2c140adc782556407b2ceeceb3a23dd7b4b0a34","35283aa374a62161beea30b12d0b5d3bd464962d58d9e65d747a6f2034268b72","a87294e2d2638764ecd8054e425b8ed8fda7e26420ecd48b7f4b1bc9ca3aa79b","be717d82336b8a702823d0e7af4f2ae950108670f84436b6f309cf0c6c06e1f6","6e8057b232d63636c1f7dae5369f2ce496d13ac0298d4e729a4f5fea7d1d003c","228372f289d42aa4e04ea339823d2801b30ff06ea98e88b25dedfab148039385","5ec5da736cacffa4888d1200ba9c58ec751132aada3e6a09e36cdbe25e528522"]
Anchored
2026-08-28
Public log entry
search.sigstore.dev, log index 2621931690 · entry 108e9186e8c5677aeade…
Expected log hash
d994a621bbbd8dc49979b621c8ed37c232baaf4093de999a10f35ab0baca4376 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787892752320","kind":"published-quote","locale":"de","page":"theme:acrobat/ordering/de","quote":"It's not very \"user-friendly\"","rating":2,"review_date":"2026-08-06","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.adobe.reader","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (1ee209bed1b4…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.