Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“The new update where you can’t just click on there top tracks,”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 3121837738

Proof data

Record hash (SHA-256)

1f409d745875adcac82b269c879c8edd6ad9e0042b9316c3fa8ca003865db87e

Signature (Ed25519, base64)

J9/88pLEIZfpcCs334O/K+EkKBc3fESJxb+BTfmJKfGO85p5iNjxc6EwhGh5vBaDeA5AiOcrS5odgF2jQ5+lBQ==

Merkle root

9d32c0cbfb02966e7a561566f948b48040888a6535c058e814428126106ff945

Merkle path

["1f3fd85f5a66faf75cfd581b35f51fbc5816c83f92fd3d035d73215eb32d55a6","d09b609d3e63661214bdd21e3a39061588a5c0da9bd2a3295d37f8ddf7bb6070","e37dba8b9bdc2e53c9b8c610d8ac0aecab9cadd1b3518f6ff1377284afbedb17","ea233299d8948d5adf8daf6c8b15791cd2ada065075a65f90e2c7ba42254253b","430ec97248a16ec81568d84eafd178c698d90c4236c8a22d0b302961cb9008ae","1e392bcef6f5101a30aa79264c6df8dda304b69afa8e98e76575ac811b3f4496","44482920993bc6c1a22231e2c32fa9d323d82f5d6e441d9706334d73036d1539","6f997ea625c20022d2a4900566374ffc1a860ac25e097a5852a7842ecf826f28","699a43b73f42fb66e691e66d5fe5bf2b1f4ff10f13eaeebad57f10fcbb2a054f","4dc1ab617666ddffb4747a40cc7e72ab36e186c21dc2180b5888feb26b00eac7","31ea8b16f16ac514eb9dce0a378038c2ec8b306248a6134940c93b42416c8060","2d979274d680ea02cf70c9d6188063cc19e622cbede790249a7762852386b868","1b6827f0620411d457632601225bf0c0fa08a550569ab3a9309e36b42067eb0d","97b419a98acf461915694d49df1436895896a22d4e853073303f64e609656c20","a892fc29bb3c992428927e47e35596c876cca06d89acb4ca102f2a534ba3ab13"]

Anchored

2026-10-07

Public log entry

search.sigstore.dev, log index 3121837738 · entry 108e9186e8c5677a0c6c…

Expected log hash

a0090149b27e60cea52dd7dc5f0abf6dd7c00feef65be2874742fff2aa9e8bad The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1791340487550","kind":"published-quote","locale":"en","page":"brand:deezer","quote":"The new update where you can’t just click on there top tracks,","rating":1,"review_date":"2026-10-04","source":"Apple App Store","source_url":"https://apps.apple.com/gb/app/id292738169?see-all=reviews","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (9d32c0cbfb02…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.