Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“I'll probably look for alternatives...”
Google Play · 1/5 · 2024-09-12

Checks (re-run on this request)

✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
✓ Public transparency log — Sigstore Rekor log index 2514083622

Proof data

Record hash (SHA-256): 265e547c1a5965cd96304d34407812d925dd0ba6fff3261691bc748202135756
Signature (Ed25519, base64): yWgJRuWlUuuW0g4GW9h9e8tDH/h/+iZICk52Av1zU2LSlqEByKetiyYXFaBfk7nTnINgTXLjiv6Fe6lxMEeZBw==
Merkle root: c35385e3159410853b606ace3c93abcb561dc35874bbfae2272c5b0050f06a48
Merkle path: ["265af96f90b64d6e010aa837c0acef5390eaccfd1bc84465d7a25744a976af15","47455f9425762622ff26efbb759bfbe6bd17116ec2adbdd2a510e0a48f533b06","ab1fa03c69d9535dd76799f7d20cb552964f6d3cf4e7b96f12962d9376baa9d3","bd5f3b554127c763fdb1a3b8803369b1bcef6b7eb446169a0b1e7b8fc27c8b5d","fb5d7d0a142feea755851cbe2ff4f61c1e3a665c9618aef1fcfadbbc3dea8ca2","d3187d4f62b2bf231c8bbe6aa2a3561e3b58ad273baf6ded8e70d20362805f17","2f41e7598587480e220cf440705e2962cdbc0a5e95891e7a94dd4934fa22ed56","12bfcd71fddaa83fb4d8d829d5cb128c43e0d93688d71d3a64d9aa8cdc44a5f7","aa952b24abe8a241c3723f864e0fb87c777ead661df75e9d0951770b18d0784c","134fd38656222a09a106ceffeaabea5a0513c4f35bfa1725c0cb04a872c174fd","20e242ec81aeb12689c2dc895b7a29f7a1b764f5db178076c592961ce8246aab","f6f19db88abe9b052b480ced611622bd455cc37ef1a2844f832a5a84a479f1e4","483af28031f8b50597d7da26c72f1abe6cb7a0a31c33e2294be9fc7d8e6d06d2","b0eaaaf0554356daf48535f981c97bcdfd635e531452842df23420c0f264e90b","19399f0af13a2147dd8ceb83692caff2214adce3d49571e366dcfb3633df2667"]
Anchored: 2026-08-19
Public log entry: search.sigstore.dev, log index 2514083622 · entry 108e9186e8c5677a81ef…
Expected log hash: eb47f42546fcc705387579993679cd6250c0b995d01bbd10805cb4c8d66efe2c The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record: {"dataset_version":"v1787123762743","kind":"published-quote","locale":"en","page":"brand:relai","quote":"I'll probably look for alternatives...","rating":1,"review_date":"2024-09-12","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.relai","v":1}

Verify in the public log

Open the Rekor entry (pre-filled with this proof's log index).
In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (c35385e31594…), which ties this proof's root to the log entry.
Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.