Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“it won't let me sign up”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
32cad5475c25ae95fc80fbc1790e987739648e22b6f02b7a01b71a57b82dd9d5
Signature (Ed25519, base64)
ZMssK4OKLzreB8yFTS9yTegMX54DKzjm2yPpIOcgO6g6yP7nDuoEUgM5H3PbHTnRGX3rp8nSn1HC3UuJNgkPDw==
Merkle root
8a6ad893af0f0bb6c448016a777af61f3f4935afd82df0db132e64f813535715
Merkle path
["32ccd2eddbf9376d2f16b5c98b39f899486e554ed714a6d999b3226f5ffa6089","1deca153215ba01867f9ee3336078e3f53259408d3dac18e8bf220c1b0b981bd","23d44b4cc39650bf514c0efb5684fbcb54696562d12dbf368d4c7adf655baaa6","597a2c9d9b3f38750d09d2402f70d6f91e5badeb1e30087bb19a1ff5c388c1da","165c34a9a4b827c2bc7df476d72456efb074cfc9101e7030b36d065e00eeaf2c","62599ed3eaafb558f7c2bf7b6cb0334e01c2279262e932587c679227151b9adc","7ee95f21aa911ce4e421eddbca55b5150b80b36795619ab1d8b216e9f496ea50","122ddeeb0e252e6a951fab5bdd12f8ffc0cf3d786dd65397deaa2c13840e2293","02844f719dbc2f3e6c094d94dff746b874dc026e4156be1f586a4ef074e9137f","28fdf2359c7f1d6843490d95b2faa973c6cb19dd4d13e7362e1c74b020db1f8e","f2a19d5711307f8de0aada457acac7cc69b8d1071ef7a3a01e246d5be4e2f12c","36963529d44affd95dc983f944b30a62582b9dfadfd64e38498a43be945977af","83c279a8cdcc2853f3838cd33a87ff3db799f19ba47dceefcae4e093e4c3de59","6276ae8d472cde22fe3044fd8f103b6cd700eb8d1fe29c2f968f62a699dc326d","8834edd87c11ce9424175f1744f71345038aee1c5b6f350a6f7bc2a49b63e8e9"]
Anchored
2026-08-19
Public log entry
search.sigstore.dev, log index 2515144749 · entry 108e9186e8c5677a63b7…
Expected log hash
b6b79ad662332330e69c4ef135f6fb13ddc70048f846024d496aaa533f7f7fc0 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787137589246","kind":"published-quote","locale":"de","page":"brand:luminpdf","quote":"it won't let me sign up","rating":1,"review_date":"2026-08-06","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.luminpdfapp","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (8a6ad893af0f…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.