Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“They reuse your address, so you always stack to the same address.”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 2514496096

Proof data

Record hash (SHA-256)

2042763a69d218393a0053a3ee1accc27b3af1d706db923cf58bba9256729c77

Signature (Ed25519, base64)

NnD7khY4lY3a4lr+NqPjYlN9Y7NW4qCcfj22V7H0kjFcikZ0drETYmIqK6XYDMwt6M1Fnnrz9G0WcNpjho8+Ag==

Merkle root

790984da83ec061260aa072fed7636f9dedf91964fe0be93d7a7a622b2b5a92c

Merkle path

["20461434c94ba64d82a60529ffc64a6f4b680c3a66d11c9ace09b48f14c4406b","8cdf1f83b3ce5591a6b1ff309871286bcc9f6deb1eb304b6fc61bd36c7cb58bf","03d817f7f592affa6029cac8793240e29290694cc1ea4976a0a4d0ade40c3b65","8ee4dfc025bd895eb19a7d12c3c8300bf016f30ac2bdac4a14fd55ee5689a491","2d3f1bceed58c5b0367ee8c8e9c80d2971bda502f7b700ae8d56ebd4c324ecab","0edf43594b4fc4802658fdbf26004912b03cd7a79c6b111c00bccf43de076c42","c4ecbc18a4f2d0f3c47f0e2fa99252a9e74a94a8c43ef20224120eadb14b4c35","8a38150f56d116a6acbbfb58061d12f75d60ec73e97c2bf7a3741ccfdbe47744","25cfbc3ecda42003c79c8f40da493adbb63e7bba0ac7d185b00a1e0120d9a8b8","2189a3b9d546826178feab194829f293023b33e8cddf7c3c6dd13088cd0a1669","e5ab1b1f7021a6aadf34161fa2ea5352390f96f6eec8cc23fc6ff17ae6b91218","f93cd82827d90a4b1eb29517ff80ea57936786b8c516ab5e1810cef538a9e460","03448bed473af8dd9cf28b70fbbc04f05d3dcf46211926aa98113fc3caee3267","b5732ea5319a80c00443397f423c046c357d98fcdaf87d445516405ed0934bdd","c7feebd3045cc2c03d87ca1241b2d06259ffad35db645c59ca3c5ee2004a8947"]

Anchored

2026-08-19

Public log entry

search.sigstore.dev, log index 2514496096 · entry 108e9186e8c5677aad27…

Expected log hash

5d2238ef768473286d75355f523ab94503f4ccd3d25e17e9efb265aa0f540183 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1787129810322","kind":"published-quote","locale":"en","page":"brand:relai","quote":"They reuse your address, so you always stack to the same address.","rating":2,"review_date":"2026-08-15","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.relai","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (790984da83ec…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.