Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Hello, I tried the free version of Canva for one day.”
Google Play · 1/5 · 2026-08-07

Checks (re-run on this request)

✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
✓ Public transparency log — Sigstore Rekor log index 2621349433

Proof data

Record hash (SHA-256): 1564ab95fff278941891ca8f5393097a1d9cfd19de0e0109f1eec7c238be32e7
Signature (Ed25519, base64): +TCTg+qIgZtusqyCM4AwZ5seh/VPHoFAgrQdQkcfaw7G1LowT6sZ40Vs5qhKV0RuOkkH/HCqb62lB6X3RtHnBA==
Merkle root: 52b348c94f3fdce59db013e2d8b151833bfb9c02163bc60ea07ad4321b96c806
Merkle path: ["1562c544b77403dd8878ab421aaa334f9cb0c7c6b9f1cb087a2331209c9c1fc0","bab42d0b6b7973c5bfc3cbf29bca60557ee001fa86a508a405ab655bde3c6056","ec9c78d6f4c31f4c003fe775e2da1c8eb8c0b89e838c920894d9b125cf87d3ca","738760fda8a3654f7109a65fe5967c32e8f290a1dd1a0059199322bcfb7ccfb5","66c4afd638273c0fdf8198c081b43619b72aa09fd852489964a44fc350ae300f","03a921bdbba6643b21295f2a64839110f9543ecf88cc7d81b17e47b0e4d25b35","54392935ed71e5c7ae467e93718158249bd773c2b44d761b96bf1f9a23c8b9cb","2a2abb0d4bfa5d04691b6753fd13dca314448bfc0fb59f9420c0b15a795c738e","907e61c095a9ac1528b79129376b165aa4e18a96d9f2904bddfe1b730caa2028","73dac8fcca612f00ddea725fe2bbdf71d5da7acc0b43f137b90f393b467d471f","6a62e9a1e2d27a02cf631b97d4856c5f025dd08f877bbeeaeef2359949b03342","669ab90fb715919711df59e8281fed40b96b704020c2f40755c68d0b3c101ec2","737cac4ca199ff9d501e9278c7c4cae2cea135754fbc58a1df4019ac06ac48eb","775de910b40798d9f37b75d39be79e50770b797482dba1aef04bba70619fff3f","50b301601f25f58ca39a522d1fc14c87ef92ff2847a542557119e06fa2bbb889"]
Anchored: 2026-08-28
Public log entry: search.sigstore.dev, log index 2621349433 · entry 108e9186e8c5677a91b8…
Expected log hash: c0c478568c16caefc62b4dd151387aace853e1d48501c09aaebf0c1fbe3c7cab The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record: {"dataset_version":"v1787884935070","kind":"published-quote","locale":"en","page":"theme:canva/communication/en","quote":"Hello, I tried the free version of Canva for one day.","rating":1,"review_date":"2026-08-07","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.canva.editor","v":1}

Verify in the public log

Open the Rekor entry (pre-filled with this proof's log index).
In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (52b348c94f3f…), which ties this proof's root to the log entry.
Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.