Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“the track returns to its original position despite playlist updates”
Google Play · 4/5 · 2026-09-19

Checks (re-run on this request)

✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
✓ Public transparency log — Sigstore Rekor log index 3241084060

Proof data

Record hash (SHA-256): 2f11e5c0198e3e0d058b3fe47b403c7c2a30946840d842a93398cee7ce85fd95
Signature (Ed25519, base64): pCwKqk3EVRIPXXniYW9E9oO8lw2xizsh0yQtpQYE3AXQ1LtdExGZocTOda1KmLDvZr+MnlyEJhcU2eZh72J1Ag==
Merkle root: 0b0c0499033d3f9b3953d31e6c838f88f12988dba810dd4de44922e1b60fcdf6
Merkle path: ["2f110b89661c65b70ff0010acf5a04914dc64974b84fc9215c5c880d491eab4d","2201792c1fb16f5e30e085ace9af2f41bfe9461db9e19fe61729af61716ba868","23a7e2a1169dd7e1d26ce515ddddbf820aaf901c90a4b84e0f2fb93ad6fd830b","9c083e0441536b885bfcdbe6cd03382a9bcc20cda910cf4c5db37740c3743ac6","3e5ae1049eee37f9e31815b00455a874191ef006d5e99046aec8f165f8f1a7b6","128c1019aa0714dc501987fda35e0ad43e9fca3478b7df42fc0e3e500983026e","f3564cb08bf500cf62ffe5e30b6f6680e0336e6d1b72f4b193e68fc47b3fe76d","c9c0f7a6aa8040d6776514e72618aa92f48db44fb679567082aac990a8a4cfed","58979bd17d34d998ab8452d165dfc009c6adaacc2a8413d5edf0a44c36120327","a94788bf178bc1e727f0ef1217ad8966d66bf9e31d1bd1cab9bf6e5a8dc6419d","fcc462e15b27af6461b91991c283826c6009da04d123128fe13ce19daba55b03","a2192486df88d4dc6da5dd9f9fe72a80fcb0210cda38213ab9466ef5ecabcb4f","fe7751fa4b9a0ad43fe0710628b6cb1b92e12eb8a60d9f17eb0c0764d693577a","8a05b9e19287b30c7fb54816a1fb848939f3f2c84b9825f19f342683d5db13aa"]
Anchored: 2026-10-13
Public log entry: search.sigstore.dev, log index 3241084060 · entry 108e9186e8c5677a3e82…
Expected log hash: a291e2473f1a4510a666e020d4d424e463d55bf4677b91eb5a52e446e5ff1581 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record: {"dataset_version":"v1791865115768","kind":"published-quote","locale":"en","page":"brand:deezer","quote":"the track returns to its original position despite playlist updates","rating":4,"review_date":"2026-09-19","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=deezer.android.app","v":1}

Verify in the public log

Open the Rekor entry (pre-filled with this proof's log index).
In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (0b0c0499033d…), which ties this proof's root to the log entry.
Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.