Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“I never get push notifications for podcasts anyway.”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 2579644936

Proof data

Record hash (SHA-256)

16b290e6a3f79d5f58147e0b9013fcb7ef54e733852569a7a1a3462dbaed4b06

Signature (Ed25519, base64)

THnnuLP8zTA2egl/qpexWqjqKOdqk6ES6EgLqHKHOw+e4NlnfCW9w/HkmOoK2XDjWJSBP80dOSow302lGqspCA==

Merkle root

c768716b2cb21aabc39de506951f775443418285e2c5eda072e3b3c2d945945c

Merkle path

["16b3fde00f40e5eddda053cabed3280ca80092a9e7682044dfa2a6b647fb4407","7aa8800feb5cb936ffa1dc45fd2a7d4efce14a250d43512e9335188569af0673","e8ca2aeb7ffb7907cf396bef8d4464c14431e8ea6cbf381c69c3ed9722881064","3e16ba27cb0a744aa1bd0a4735b9a3f8eb9da854f1346c2bc3f003e6fa9f8a69","7915d3fbc9c7567b93a24d701e4638a33e91e93388bd7d8a4f4b5eeca56bc149","463201c18aafbf43d52c6dfd65771adc222da604a0e6fe1906b4c1d7293882ce","7c18f942b0f34526e72b21e1d3b87dfcbcc17142cde08fcc396bef3aa53de51c","951b2ab4f1fde375a934becb2f91729dff8b2d1e0c9904d6336bb21512f13239","1bcb2408b5edf2653cf27fe32068ea25edf13c2d6ee60a56fe579bc70534e12c","33f807db4d8101b5fd365bb0a64b483826f30c92834bc54098fb10c49c010102","10dfc38d92cb808570efd8b4da55b7412af5c5f73b2e89fc3d852f79952a14e1","2040ad8bb83c34fc495eeb8c9f81caf04fd90dd5129397bcf00a3351408f61cc","38e74f19a86a1311a4dbfb6ff75312ce32e1ae47f608a45fe54b6162c0fae8f4","58ccafd37278be2b9508db439c14e85a319c2716b397eaff7c959a5020ac606e","4c61c84fffc3f3248d19b221d821cc3f0e04d1cfb4151bcd103cb5959dfdd5ed"]

Anchored

2026-08-24

Public log entry

search.sigstore.dev, log index 2579644936 · entry 108e9186e8c5677aee79…

Expected log hash

3a9c8e6bb3b2990f2171448c5468a63b9d6f8bed98ee1b72cd7d6f73b4663243 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1787545182186","kind":"published-quote","locale":"en","page":"theme:audible/communication/en","quote":"I never get push notifications for podcasts anyway.","rating":2,"review_date":"2026-08-14","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.audible.application","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (c768716b2cb2…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.