Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“when will you be adding a desktop version or just a web player?”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
310365c061e7dd4c0d49b8dc6b588596890220e304fd5a491598a1ac641907ca
Signature (Ed25519, base64)
Fk5zjvzaSoVvA7TdI4Y72YtuWgiq3PsaScsR7JfnMU3EiQoc+MF9IO0zG5zEXugdsTLe5rTRpCz0xXgJt2V7AQ==
Merkle root
4814209eff208716b4535c2b0fd0b03895bdf3189545e82450cb75591e4887da
Merkle path
["31024eda6d1e8d45bf634137fd322ac8f467dc7a49735ddce504c884298671eb","a89a280f8cbd88218d745d52416729ec7883efa24a31dd58239efd8ca39cbad2","1ed15e03568a3e071cc66601ddd40db624c74fe902a1f19dae942a6d94385ea9","b6802bff01cac719271de6999c8095cb2a79b8eb0a12daa3517efefa3d38dacc","b9504d782cae5b861b0ef2cf883edc1c5acea364a67afa0d5ec0f1de69051326","e67dc65416be4e3fb4518577477fcd49dfc798be046c89e8796d44c5233d811a","1bbbdee245b3e4c846452a36c59d06903865875295f189268b19c00733520f8c","3f4162930590ade47123c6342a21dd5666b7013a5310410e1ea3961a587d879c","f10c3aa196168a2b8e67a573a4dd69276f902e91bba739c6c849669cc9dd5e70","ef493240009a5dd429348ee4146b34cb78c64dfef79484867ca90083b52ecf6d","40b542b64eb41629def892f9aa92b8f2a803787905bb24d260b4711eac41d74e","4fc3f7ad0e924885e102732985d05c6ed900edfc5866520c57f81d1a104dce4c","06056568f4a2b1f02479cb1a58506413e0f80ea3413afd3796bf7749761250c9","4222d4cb0e3cb98443733ef8f53c14d869249278d4ea410003cf03e3a343c09c","12d9d8014c44524a8d93c0e0f1440a3071b98d9de55311024d7d505c5879a63c"]
Anchored
2026-09-01
Public log entry
search.sigstore.dev, log index 2671265667 · entry 108e9186e8c5677af0ff…
Expected log hash
0d4aa038b3cd3d7cc8a3744c8157ddb93929116887b29b6be030d34102a7e419 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1788234112368","kind":"published-quote","locale":"en","page":"brand:bookbeat","quote":"when will you be adding a desktop version or just a web player?","rating":2,"review_date":"2026-08-21","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.bookbeat.android","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (4814209eff20…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.