Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“I have to uninstall the app and reinstall it”
Google Play · 3/5 · 2026-08-19

Checks (re-run on this request)

✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
✓ Public transparency log — Sigstore Rekor log index 2647647551

Proof data

Record hash (SHA-256): 338537df90284eba9c9c84a87aaa6faeb75fba3bf113bf003924ed70dad2d470
Signature (Ed25519, base64): IlunZU1m1+oDcJ70Bq79k0S1xvROW3g/+m+JqlXlk4GgtOQVsm1L7SDBkrV4w57bCCTs4PzgeatL5dCQGluMDg==
Merkle root: 6e81627552f2ac346e22c9eab513b5697475b3faba110f5b1d208622b33b78e9
Merkle path: ["33876b863a4f65caff52a2597321a5fd09e26ea796055b960efbf42e9fd95253","523171f06f77dcaa5590512e4818712df6cdbb394567f8044cb17c1f36f01bf1","aed481537bd3ba27ac0d8fc492323e2b9f26f005cdee45f7a0bd3edae2e8d737","b977d923e40faef48aba42ceb9289b155d0f6b06fad8274a4c81f703ab36616f","be5ddb3cc10789309feabc0d7add92b045b039c3267f132f31a8d9de59893da9","4dbdd535199510a9f4d20ccc06823ad1fc9edb7232adbd2b1da560c4b1d96532","033538d3ab9792c97405eee1056531fc6eee2ecad776307a9f7eeb3caa58d2af","e6be80ab079f9ddd689fc80ea5ed22d81b19a6aa51eff64c1efa35b1dcd740c2","54979357a2a84e5ae3b2e2ab9d3fb1b18cac976d828bb0188b7c88f7f4f8a9aa","d9ed5f1be40cc587bafbb77c0c71fafd89cddb7d228e2e798eec8ed13a3d8d89","a034e7571986aa680d97544faf790a277dcf03a6b7927d28a522e83614057e6f","dfde49fd00cd17e6c2142046017f5af8f9f43a174859ce3a0bc908be378d5887","b1d6ef92ebf7b9d2de3d425873b278df8f93faffbdd28289b8c984b597db622e","92865c042267b50b2e80a085961d6bc0e14e984b1b1736b31a5406d17d7c28c9","a140bb68429284d6b768e6e83ab2503eb3818b2fc3adb438e4e092cd869726ff"]
Anchored: 2026-08-30
Public log entry: search.sigstore.dev, log index 2647647551 · entry 108e9186e8c5677ac48e…
Expected log hash: dcb20aeec915a281d96e164bbd9aaff5ca0e571eaf509f60cc28a86099f52bcf The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record: {"dataset_version":"v1788066004428","kind":"published-quote","locale":"en","page":"brand:zettle","quote":"I have to uninstall the app and reinstall it","rating":3,"review_date":"2026-08-19","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.izettle.android","v":1}

Verify in the public log

Open the Rekor entry (pre-filled with this proof's log index).
In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (6e81627552f2…), which ties this proof's root to the log entry.
Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.