Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Be aware when you press that free trail button.”
Google Play · 3/5 · 2026-07-20

Checks (re-run on this request)

✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
✓ Public transparency log — Sigstore Rekor log index 2632227861

Proof data

Record hash (SHA-256): 17258c5d1d265bc420656e5db504d012bbf8da5e639482e6d2102cab52f2de37
Signature (Ed25519, base64): 6QvK+Z2ncJEkJHOvlHWLaUOvFQKaPCxsDFNM6ZWhuWMUjPSy731mHgrCOL2VMehYebY3K6zVmO54rN8RuGl5Cw==
Merkle root: 9809cd1f65a3d4e144579745a20f7882b635b7ad9e75f8b31fa040fcb7e74470
Merkle path: ["17249d2a117d8822adbb2f56dbab9d4adb2de08793baf210d9ca80978ca0662a","19deaedd4070739f04b4419eff08e4cab74a57264cadbdcc2762853322c1cfd3","9fb42ef67edb8396d139af3297058a38858bd2aec3e3782b015fbd0b51f5c549","7c7c0695002739b4762137d25413d60b2dafe3b76ff351af5d90245bce73ff47","33eca9433169a3c6d19697334029633c43b572db6684b13162835b0be06dd4bb","46724b1af08901c5e7fe52ebd36544bcb691e1fa7870e467683f3503609b251a","1ebfd56d8f32c6c52e1a97d9f591727bf91d0fff0fe7f55c3d6a47b478f4c211","a9afadf41d9dbe7c76b99122170fd8a432172419512c992fa0cbe082f77e0a5d","1b0f3b7e5d646de3ff2fd6670b48eb71f66590217b92b5605baba5e360a39d62","66cad5b54a78b960215d28215a5d5eec22d209dcf3395f8f6626959a2cabde9c","07a027eb2fd4a498e30798d2a1f2b58a0f4b4ecfd380ccd4b59009139ea60da8","481f7ef0a039f0ac74ac45e941b1f75812097a8a1d86b01a2fa72df921bd5f85","c33a9efcd0298a63eaba2136cfe18dd1517727e1b9e9bbb60122216df6f0406f","13cef35a80378a74af4faef102936039d3a54a741843391bcf32134dd8e61270","5420b3c3f4a7cfc61de84c757928b42517e167d282e291e38912f2169ce60350"]
Anchored: 2026-08-29
Public log entry: search.sigstore.dev, log index 2632227861 · entry 108e9186e8c5677a52ba…
Expected log hash: 8be5978cb1be4c5daa434c41d0072ddb211c64c3f93b137b58c71c55ff15eb8e The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record: {"dataset_version":"v1787972611008","kind":"published-quote","locale":"en","page":"theme:acrobat/service/en","quote":"Be aware when you press that free trail button.","rating":3,"review_date":"2026-07-20","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.adobe.reader","v":1}

Verify in the public log

Open the Rekor entry (pre-filled with this proof's log index).
In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (9809cd1f65a3…), which ties this proof's root to the log entry.
Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.