Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“I've been using it for 5 years.”
Google Play · 5/5 · 2026-08-04

Checks (re-run on this request)

✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
✓ Public transparency log — Sigstore Rekor log index 2647373963

Proof data

Record hash (SHA-256): 1c5d702d003ede614750eea9bff54da8104c6886bfa95e7acf1ca12dd2ed9bbb
Signature (Ed25519, base64): TMhFZufa+dl+n+AJEXQ9PBbf+xZc+Mg1FkiJ3tjBL12X2sdkSV9ppTBon0byCxeHpEIfIZ1Viayo1pIpQ2SCDA==
Merkle root: 04316f9e77c76812dc849d666d14a3474b406ce05264d27502eb3b0caa9f1007
Merkle path: ["1c5f7d9fb2ee4aa6bea1439c432f72d4fd4102788f9dfce5f6a4941d76505613","cf53590ea304f221270e07c33b724a0fe5fe69702fe2852b61f8976cc4a873b7","88f3b5ec51d139c80647a7974c3cec63e652b9381e039b1eee19be4d2f7f4d25","06c2ef5152853813315c7c6880532e9dbcf7af4724add1630febef20a7d3e724","f9c308529be56db27e68b45243e4227f314aa05f737c76108511e6bb13505350","2c5176cc98c97185c2199b2122573932577f7e6cffe3ae43f61f359dddd656d1","b36cb30d124967f6e54357842acea1470756bf49d879ea1202c9daf5adbe27c2","8b165115e99e861c1bc6fdeff827077bf58901ef32ea76acc468fa908d651776","87328101ef9599474fb2aab7f416a4975b30de07cf3e832a2bd3066cf7c9a0a5","0ebe19373ab14bec047d874ddc585f754ebdafa81e6998c05de4754b5eb5225f","64f42e63231d0800534b0e477b4bfdb34dbf8e45efdf79be7de5dbdfc4730ec8","ff871dfa1fc8604f5227117f5249126f5b96226adc396bf3f35ac34f72bf2abb","4683f278b22d108d92674b2bbdfa3408f72cb43eaf67c46df02a5ca06ffee65c","8959f451902aaefcb7620466197219b59bc350ca63b76179da94c6515c9bb8f4","73b8e77fb0338bddd543a7d0dbd877f7ec52e9acdeddd984a281b00d26ee88ce"]
Anchored: 2026-08-30
Public log entry: search.sigstore.dev, log index 2647373963 · entry 108e9186e8c5677aac78…
Expected log hash: d71b0dd4ff40d20fec474895ffae8cb152cbe9260237c2b6f93b97e9d6ed9209 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record: {"dataset_version":"v1788060248304","kind":"published-quote","locale":"en","page":"theme:audible/durability/en","quote":"I've been using it for 5 years.","rating":5,"review_date":"2026-08-04","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.audible.application","v":1}

Verify in the public log

Open the Rekor entry (pre-filled with this proof's log index).
In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (04316f9e77c7…), which ties this proof's root to the log entry.
Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.