Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“why you taxes me 30 $without my acceptance from my account?”
Google Play · 1/5 · 2026-08-06

Checks (re-run on this request)

✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
✓ Public transparency log — Sigstore Rekor log index 2514496096

Proof data

Record hash (SHA-256): 15bedfb6e6b26adab4794d91fbd76db8b823df41d1c0aa72b90c3a0277803a60
Signature (Ed25519, base64): 2jGDjUWWycfX72Hw43a2kZAjYwrCumqq/BERhGPg7Rx8k9kICXhMMa1mWOLuLswquD8SjXZOK2Ko30LoVNXRCw==
Merkle root: 790984da83ec061260aa072fed7636f9dedf91964fe0be93d7a7a622b2b5a92c
Merkle path: ["15bdecc227993e0a57ecd2a6da7e7b5764b547958cdbdae8d62bd09c57a77416","703808e2dc636c88074fb3bc25a0d16769ae995bcaa02b485d961608faded02e","fbf56d6f6d1eb0bda196f784ffef62b91bc2808a809c0795b684d3dab7f69ab3","f54cac14705894a5a1ee6f977e3d5c13edc1ac33796801badd65f45e7522c738","4165f93e911ebec094d21bff08be48b469760db5bd52532b9d4826ee577d17b5","42db14a64733576f375e60b943f33d0d1e0426c5cd5b68a7d25b20a837a4cfed","5744bb0a617b72bce4529933dd711a43b9bab48bcc6de59e85cc273043b660d9","24100160302051b29987e69cc503736155528bccf66d2f9249be5761120bfb85","7725bd7eac368c1f57a0a43d506258ceb0bb4d646b014eb904fe2f947ebed51a","a0e95ed5c532cf5bc52f859ef60b88c1f1cb3c91b2bc5fbb5339a999b6e0d30b","4f8b11718a6a21b7cf844fff7e95013586c05a411ea1d5ebb8e04d7a3009b457","0ab165eccc945f726f72a18604e160b33092671c5a22e68c21815ee55c9985eb","03448bed473af8dd9cf28b70fbbc04f05d3dcf46211926aa98113fc3caee3267","b5732ea5319a80c00443397f423c046c357d98fcdaf87d445516405ed0934bdd","c7feebd3045cc2c03d87ca1241b2d06259ffad35db645c59ca3c5ee2004a8947"]
Anchored: 2026-08-19
Public log entry: search.sigstore.dev, log index 2514496096 · entry 108e9186e8c5677aad27…
Expected log hash: 5d2238ef768473286d75355f523ab94503f4ccd3d25e17e9efb265aa0f540183 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record: {"dataset_version":"v1787129810322","kind":"published-quote","locale":"en","page":"theme:acrobat/billing/en","quote":"why you taxes me 30 $without my acceptance from my account?","rating":1,"review_date":"2026-08-06","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.adobe.reader","v":1}

Verify in the public log

Open the Rekor entry (pre-filled with this proof's log index).
In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (790984da83ec…), which ties this proof's root to the log entry.
Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.