Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“I cannot even go in the app if I need to pay”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 2579520646

Proof data

Record hash (SHA-256)

33a9f09dcfabe63607e9e34ce67ddfa5f86073e2cce409abfef1707ce496d0fd

Signature (Ed25519, base64)

APJFW4GgCeDnKHezmpawY/gkCjA7lUv8A2oRxWGLzUjvbYye/3qLRaW4wvQX9X4axFZbcb2mmLQJNEciUsjzBg==

Merkle root

5281b854216b4e6bf9a4d9c1ef2bed9777ade9c29883f1d0f546437faa5e15d2

Merkle path

["33adf148cdd1d58984f1b755ea426edf5437e023810a8553c45da4d4039bf825","249de1e95cca373fae3d57cb7c5fee0646640cfd965a5ed1c230547e0df83274","23857691a353e5327ef52f42c6e0184fd4012f4791de09817a4bb1c106eac972","4df7ba2392297378fbb426e07716a6b9dd19cd910e0e692fbdaf1845d49c5252","d802358a484494f0b1987ebafd32d0f94c9a40cf5cfd0c246380a4d7887aa6df","4dc9b4e32bec4eab9a73989d7b415b25e46995544a58987469fd1b3682cafeaf","39005c3f3198dea9072b612785f49bad522528751d731c398c8c0f1d74286273","638f34bf04ae87247b0f58caa597d310e177d535c9019df6b6f5df8ce33ff567","dcee79847edb672eed62f7a11c5b855249fcd2c05e768feaaa55a9301c3ff16a","f32a8da69232ea87e9ab5f8f01236ffc174463c3203cbd696134e5906fcc4ec1","06a5c778de5fb6fc39e70e62998854f33147f0b0c031e077e1abcd78c4210ef9","05e0865f943f6e35fb24a81961625c859eeac4f028e74a0110bde1d718e89935","47db30aa88713fce9c10f27fa058373ff36de7b6b771965b99bd1360fe27d4b0","3f2e066b220d21f290fe4ee4e114e6992e62cbb35f6faaf0f86e02332f98dc0b","266f13136d3ad4d5b30a4dbd24c9af8bfcbe23d11b0188abcff5f3a43a71af37"]

Anchored

2026-08-24

Public log entry

search.sigstore.dev, log index 2579520646 · entry 108e9186e8c5677ac653…

Expected log hash

6c785387604f7a22a5b096fa3c6c8cb93055a92b2f2f24f3a0a42c9bae32debd The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1787540495725","kind":"published-quote","locale":"de","page":"brand:drawboard","quote":"I cannot even go in the app if I need to pay","rating":1,"review_date":"2026-07-28","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.drawboard.pdf","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (5281b854216b…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.