Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“what if I didn't like it then my money will be theirs”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 2632992954

Proof data

Record hash (SHA-256)

19d3896b7ba9c1911624c421ab1567f9288c432f9f204eb8ae05f9a470d0987b

Signature (Ed25519, base64)

8cy9U8ZUNeEXoocIfHLUfPfEictILRCmrN4B6ElY8E4y4vbUwFYjxpHya60LaAGUBgL0pCA0hhb4u6t484UQBg==

Merkle root

761f428c7f44b8ba37e197f3cbb402245009b42c2fe1c2d1c22502b7539d8b92

Merkle path

["19c64f94bd33b6f61b82565db1b491afacf77d8b6d8f18f8a9774af0ff5450be","30767a7858c4c193352723a8987b63832a78abac8b351345a8fb5ef3f68a5275","94baec26965609e838c827f69b362ea52fc7ff65982562f219469fef863b3b36","7ecf51bb33d954381e876f4edc86f79ea52b3a63eada2c84fee130f4b31d4704","227640a088e543eeced85c02723167788a54d0a606d88f78bf62f4cc57cc7d63","9306f37d84460f1d7787d15bed853fdd8f7e60414da8b819fab9256347795253","268b1e0ea3aee4fc65e73d3458b77532836d1716002462edf3cd2de16c27f709","97d8c0e7de2be939a31343cfd4bb6fa49b41d07672bb9edfb8171839f654b833","fac90d6b9e947eb3282056b1e4f42b0c50bdacd925293955251c07694bb8a95e","59cbd9bec02249629058c11004db2a2c3348ff054a82279ea6fbe05ce577474f","11c12dfaf6129444ba753d48d96a0c0fe461f60a160e232e52720838ac22b818","99ddebb10e95b4e9a864e1acdc8af7e6a8677f19ffe0789e14413bf52176f2a2","25ba2ac2abca74d5248bc368aaf9983fea985a62c2acc2567cbdbe71d6bd7cc0","d7d046f6bf143929536e498046e2783984565776df0c4d84bbeb719debcca31d","98f4686310343eccfc39a6e64e03e6f8dfbadf7603f7baffd9efd8b7d19d425d"]

Anchored

2026-08-29

Public log entry

search.sigstore.dev, log index 2632992954 · entry 108e9186e8c5677aa5ca…

Expected log hash

96c11d64daec1fd5d2cb12bf1cc37249a60cb62f00cae505cf36fc8b47d6ac25 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1787977614417","kind":"published-quote","locale":"en","page":"theme:canva/returns/en","quote":"what if I didn't like it then my money will be theirs","rating":1,"review_date":"2026-07-31","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.canva.editor","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (761f428c7f44…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.