Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“I've looked at my subscriptions to ensure I didn't accidentally subscribed again but there's nothing there”
Google Play · 1/5 · 2026-08-13

Checks (re-run on this request)

✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
✓ Public transparency log — Sigstore Rekor log index 2557057559

Proof data

Record hash (SHA-256): 14e4824fef09cc14df32a6c9e66bd23c9856438dd31322ee8cfade4430ace9e7
Signature (Ed25519, base64): HxNm/GznyLG/5bqaVt2RNFALnWhGr80SxH99VXO3X0uEOerbgOjhGbGFaE4Ooz3JYYN0DSh7zrkASr/c+foLAg==
Merkle root: 7e1d35ddccae85f1d1b219083f51bcf5243a04c3c6ea5c30a00b2f5d8561845e
Merkle path: ["14e605b6920033b4c6cc913ddcfda1855f970ca3daee904a22cc148da276bd9a","d16089ed3fd6db2f1066e49f975c661df75f89df4744a2108af6be0bdde98794","0f580aa81e50af13fb08ebafaeb0a8b9e821ef1afb8d26636ba4e5f98202db67","943187011afad3138963d051e526f417abd5715a2d5f85fb1c4cf17c686d71cf","5a81f6e1c02c0c4f5805111d03bb3027b3c582503c98d1bb2a24908fea9ced74","f8774f0d8c5495adcf3912372d03a4163699f0c101ddba047f9ce826f79e1abc","158a82b4b146f89321a8bc741e6de54a2d4176b7e45c8cc0fcfbc50c07e38231","903e11f80d9651972013a6041e7fcfa0eddc137538218ad47bda1bd968dc70fb","8067987f2507edbc3e98a285c8f90000450edfba74fdbbb6ebd236418ca29912","e14699f407c2e78569f5b28ae4e43e0ac49642d4f3814ea25c112a481a06a70c","3eceb611a139cbfc1feb30498a4b26d0296c9f9beab6ff50230a7d4bb5ce34bc","0d9272765e95bb88460e0f11dbec57a088e7a1040def1ceea46f2ba83166d4f7","2afa3f952c3f43ea95afdb596f9e46f323ee0a3ec7c3ce32038311c8a89c16bc","02b987d8bf0552b7c2d2c3d2c526ab592e0137d214145a63ef84c4f9665a3e12","92f0e686d0ee915432d376a42135bb00ed6e9f0363b8646b0ac5575e52c28909"]
Anchored: 2026-08-22
Public log entry: search.sigstore.dev, log index 2557057559 · entry 108e9186e8c5677a5b66…
Expected log hash: 49e6607c07aad7ce46e30f32fe1978d4dc57e680151ac8134de2fb9d6e01f187 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record: {"dataset_version":"v1787311095101","kind":"published-quote","locale":"en","page":"theme:audible/billing/en","quote":"I've looked at my subscriptions to ensure I didn't accidentally subscribed again but there's nothing there","rating":1,"review_date":"2026-08-13","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.audible.application","v":1}

Verify in the public log

Open the Rekor entry (pre-filled with this proof's log index).
In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (7e1d35ddccae…), which ties this proof's root to the log entry.
Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.