Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“The app is intuitive, reliable, and packed with powerful features”
Google Play · 5/5 · 2026-07-02

Checks (re-run on this request)

✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
✓ Public transparency log — Sigstore Rekor log index 2657480792

Proof data

Record hash (SHA-256): 1ed8534bd272849cb204c8f213be9790d0a8166b0cca35dfabfd0998238da337
Signature (Ed25519, base64): fCVe78vMW1w1GIsOkTe727bWlGXUWyMofECuLLvfYhIV+XLuO74fxZvxyQWmUUEXIvJbxbt0MIbKmDMaZ2zBBQ==
Merkle root: 1b8bd208913fadeacc13aee96871dc2c1b9dc61e733c3f3400ab6ee0e7324443
Merkle path: ["1ed7a2d1cbec531323ef4b2c19c276e8da07944f851fe3c8d5eb1a592fedd989","35095552c877933441fbec9f5f8bd06934a027d595f5687a4a2deac5d934424f","ce575603069150aed27fa1f8d6090291a660e05a09f19bb2ae08be3ab010974a","172f22c4fbe06aca9adfa89a3408e19237133769af83dcc1bd065dcedf88a3b2","783ab62c7a47abaa32f2e8705779aded9eb4174fd4f71ecb93c4bcbcf686f7b8","45118d285998c67d375b3a41dcb360601c9c0e9cf79647765aa75d910cd0e727","b652c0cbc2ee5cf31f5ddf170282cec0dfe5920b00af87f04839d976f753695a","80807f745b0cea284ca6602bee8dfd96b29e72200f16f20b4f71427eaaed8c10","41a210145860a3f26ed83f3eea3dc3f6016ad959dae93634c630f0189ad2153d","71a86fe77bf709276c42a7fa2f42d46d600057c1ecf8e20ce847b10f7409c5c2","593f1e1d4564dfbbf2d8d402af661ec8c78dd41b8ade07ee82d8eac2a63bf038","a96a60089d3a33968e229fd6eac37fc507699f90a3a1d38779c0510d1c292d16","acf52e9a767b254023e37fc92bc6a0d81f036d70fec8df47db9f5728533e3c9e","8a5060efafa29fbc64db755e49cfde82194cf6467c7dda5949ed7b058f0a3650","ce07c6a4f0a9b6bd8c624cf5ab7198d339b314b8dcd9468f4437006e846aa076"]
Anchored: 2026-08-31
Public log entry: search.sigstore.dev, log index 2657480792 · entry 108e9186e8c5677ae7be…
Expected log hash: ad55c089e6140369414933a3be64660b3e37350199a02055154c25d6001c76a5 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record: {"dataset_version":"v1788145962339","kind":"published-quote","locale":"en","page":"theme:acrobat/delivery/en","quote":"The app is intuitive, reliable, and packed with powerful features","rating":5,"review_date":"2026-07-02","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.adobe.reader","v":1}

Verify in the public log

Open the Rekor entry (pre-filled with this proof's log index).
In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (1b8bd208913f…), which ties this proof's root to the log entry.
Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.