Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“I love this app!”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
28b4b0cac892db7da1759f053c8683cfa0252746a14b4e35b576462d5d9e2b4c
Signature (Ed25519, base64)
YDP7iYi+7PorHlvabeA99VOrgKh2wqBHCwdNxUxL4Jm+/nfgnQB4E/swS6hmEa/Jtl9N5ySVrQtGvGIZSMN1Bw==
Merkle root
8af5f2f3f65c47a75dcdddbf363e3e76b22d37f4e953d150fcfa3e84bb04dba5
Merkle path
["28c26e56f438b8a27b28958efea2353850f92a4644c49a1897a0aab7f933b11a","36fdb70620cc59e687de8c458d7d819ed0119dc91f1a3ff21162aac6c7861e40","7a9023c06cd13d7a09e7ab8cb4b277ed7c48ca1ba7c706f74ed358bdcb36fbb3","d0b3ea6d3909a7caa23a66243d6430365bd0ef6cb2d7b426fb69df5433cdcef5","46aa981bc8396b8e4aced9f62daf85929ba3f9683261423c7f48f9cf0a67c6cd","b8ec56ac2a6e99be90d99146f6424613f0cfb073a56b09da96d3277d560c4570","12cc5c00db6079258713c4811800aae7664b9806ca2029fc9d7f366e84c4fa11","b841e601ae7385203ab3e2c330d790674315f7445a8afcf72ed2c0463ece06fd","64b823c214f5d4dcb15c389bc18f9769dae0c41a0469a60f8461c4e729acf9b0","7a2b132917748c82f0f3df013e78a9b1ea81d59802357ae0ed170d5cafa2531c","cf3fd672f99fd3a12c561632c0bc7eef648128cb12006c0c959d1eb66b0780a0","69e0b278fde36472d775b547f81c80ab6a46676326bfbd973817b55dc3255d09","2df4d836b73633f71fa96faafac3d9d32f00951d180b99885afa9511763f7b1f","2212eb5ff51e97198ac2cd6542275dfcf712b9be9a8fab294a9bf844689bcee1"]
Anchored
2026-10-14
Public log entry
search.sigstore.dev, log index 3247835674 · entry 108e9186e8c5677afded…
Expected log hash
306cff230c51a4aeee6711c8f2603eb2af6985e8dc9f5dc959efafe3398b8caf The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1791944613264","kind":"published-quote","locale":"en","page":"brand:vaia","quote":"I love this app!","rating":5,"review_date":"2026-08-18","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.studysmarter","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (8af5f2f3f65c…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.