Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Uninstalling only provides a temporary fix.”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
1ba48e6315bd598e3dbf571dccaeee11ead3af719c3eedf86fa07ac273676937
Signature (Ed25519, base64)
PWikxp+Q48z1BPiBFxnFq9Y4WMLyNnbHOAXN0shu/PcGEQaB+uxtFqfHb7wjs1v98y6oaJrU4xA59t4jCdPtAQ==
Merkle root
1128c1e3e4534f30e1f8c2f8fc1f60db99ca4dd81f25405dfff62ff1f39e22a6
Merkle path
["1ba29be4c910bd4ed334cc2127f73d6752a899cd24ff51a94fe05a0eef0a408f","6e0ca193ec8ff18699facc6907b26838ffbc7ccb85c407580fb9b39c306cdc72","f0bcb0e808def3962ea20ca4a62a9a81d5fb899502a60244e89cafa50a97b0ab","ebb86fcc8f16333deac4c7757eede40c55f760d16d992902c767eef4f79d9655","52516f61347be938d389dc7924fb02137da109ee9bcc382e9d3e2e62ae230d79","fc1325ef07ee1bff44989491cdc134a78d3a8cb21e73aaa6678aea3d234e8498","217082552cf10ee1d68024cb9fff5b143fd3f8086a0f6210346d54ad40818698","46075a081a5d5d43d892e65091741cd448585028070809350028700906208d2c","ba07fd619fd3370f9ea3a82dfe1b60a2ddbff5737fb96bbddffaf3136772173a","2a8fa862966af974395d7fa5926c2ab2720a8c78f1b3e4663eaed13056e332b7","6d0d56bf35e92fc914622de507d820bade5cccd5e6abdf4ecbde1a2ae0fe9cbe","d2fcf30f71e978cfa8864728faa4ba390bcc591700ad83ceb71a9abba973d6c2","9428e24b047bb9d4ac05b5ab6de36e249e544865747a9fa357ea862bb3060151","c4a4d8b2a4d8c0bfbebb4916fd7e139c5aa71a08248affd318e33dfcfb90fbec","b39bfa02188a075f3ffabe31b61efbaa34ef7a32306f491e668efcd33d84ef4b"]
Anchored
2026-10-07
Public log entry
search.sigstore.dev, log index 3121353835 · entry 108e9186e8c5677a938c…
Expected log hash
3980f7151edd7b0249ea159b11c34712cba10d59cd8ffa603af676e538f81cfd The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1791338675665","kind":"published-quote","locale":"en","page":"theme:audible/durability/en","quote":"Uninstalling only provides a temporary fix.","rating":1,"review_date":"2026-08-11","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.audible.application","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (1128c1e3e453…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.