Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“OCR works only with a maximum of 10 pages per run”
Google Play · 2/5 · 2026-04-11

Checks (re-run on this request)

✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
✓ Public transparency log — Sigstore Rekor log index 2543857133

Proof data

Record hash (SHA-256): 226c003727e99b3f053063a0e687e41c5eefa83e38b46102867c9f32766fbd07
Signature (Ed25519, base64): csUEEQ7YlxOjGjHPcfEprdE6OPR+gTfICAECMXzqnIRIUAhOJtjuHHxkwv+rjEYYQLYUP+DlhAVUDBbl+lyjBw==
Merkle root: cee60bb6c0816d1bc69326ea12cf0c5c00cbea13afa283147bf24b52e30f839c
Merkle path: ["226e81a62a556a7b6a3a5b2037f18ae1f27d33a31b128217110b22af5a4ae77a","da82c7a27d37101c29307f6b3e49fc8dfab7c00fa4bf7ef1c6a73cb4a6bbab6e","99ac880f36be966f110d850aa2c11653780aa22053a11ee25f2910febe94ade4","38ba4f412561a607558bba4a6c84ac8ddb853e5f12c4f4ff69ac222adb268cd0","a083ee703d7c2807740153859bc228bba186fc44d11052f03917f08a2103b94f","14647d502a314cb1b429c4e52f576cbe9d7b63c6ba540f778a4a4578d9f73918","8f039058bd096a3b7bfdda96ec55ac33c79ef3fcdece4a9ff4cd6719870dfa73","38748e24771651a4839a08ec763ed9def1f56d0d413f3b987a323eb5fd698ffe","4a406f149ab380345921b3bd9ade8164ca48e90486d56a7416535d6ee91917f9","819c95160839a054de3fbafe70923b890a4c435d88a3fecbd223120279f6842f","67d9484b75402cad6659f9dbbd1623f614dcd95f06b4433661e4075fc388fc9f","9f6fe8b8ba9f3011c0e6aa1e8b55f973467b9c20f251bdedad5d16d3227cbd49","a1c11df65738ffb18228c247fd6ad5fc76428a9130a0079c6abf079e9cdfe043","806b2b46dda360b28a8a38da683f56d42f23ab9c4a7b2fa07453f271a33f5ff0","57e3801fc0af4bd2492130e334ef2d0425fdcd10c95109df38ad0d371e279fbf"]
Anchored: 2026-08-21
Public log entry: search.sigstore.dev, log index 2543857133 · entry 108e9186e8c5677a5231…
Expected log hash: d8e1ac8b740526c2915424d7f7c6bce881a4ef05d0a3a3dbd88e4c760e36623e The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record: {"dataset_version":"v1787288037224","kind":"published-quote","locale":"fr","page":"brand:smallpdf","quote":"OCR works only with a maximum of 10 pages per run","rating":2,"review_date":"2026-04-11","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.smallpdf.app.android","v":1}

Verify in the public log

Open the Rekor entry (pre-filled with this proof's log index).
In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (cee60bb6c081…), which ties this proof's root to the log entry.
Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.