Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“is any of the money this "person" makes going back into the app?”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 3081458408

Proof data

Record hash (SHA-256)

341133a999adc84574549ad01d79c77de6608bc695c0178bd0cf5cac16bfe2aa

Signature (Ed25519, base64)

qu60OUIuUkBfsMLIsXuVuGr01NFFH/pNpAMK+z50qfe9DpKRhL4UB28zOZ+Uy6dDFWLJqIxGtivdwNRhBvYCCA==

Merkle root

f2e4180d5a0710e7663a4b79dbb50303bd6f86e3a2b406f14001987f705300d7

Merkle path

["3413684aec3f4e3e66131dec9307011517696ac2f8cbf847fc9e2e654c24ae04","ad4bcce6dd298ec8e33f1fa12f49c02aa6f061bead854c7954164e906dd533bc","61f5eac30d05b77f64bee0318063e64e450bee8df8793533b71d84fe1542f032","d4b158625f4485d2af5a9cbfdd4d4d0393b6ef8957162c5966b984d16304edbb","0bab42bdda6fd2fbf3cc8ca3f813a4de3fdbc80a563e6408d3ee5b33a70d6d49","2888cbcf0e1b773253a5d5826800b6950bbfb59aa69d42849673cf9058e42e1a","153f3b93c027022bf8501860aaa5cd7a429a66513f1e3a5aee5a6fc3f965e34d","271e7d882c767b5fcf1758f45fde94d04c231eee1cb4dfa81d1311f7491f446e","a7bddcc7a3346d2b3134c8af00191a127349d35019e0266983b0d258d0793898","cd336cbba10dd5cb5bc06c48eecbf75070ada3548c9d284131039800d1ccaca6","168911be385354c78db41f4fc053fd8ca7a28deca0d4310eb0afdb539c8b03bf","ca76c1ec7bb54dfba0dcf403e68beebde5ef8981308d5decd9b72a7fdc4fb13f","039d1a9733830326fcb3d2385978534fb925aa34aba793b08df59fc23cbbb411","a6e8e25a2ba90cb0272e9c8b0abe3d0d6e1acdfc88815c674818da4404f1095d","e9f01260bd0385751f2505473f49304ca5856588aee517e499b7a694c94e66cd"]

Anchored

2026-10-05

Public log entry

search.sigstore.dev, log index 3081458408 · entry 108e9186e8c5677a9490…

Expected log hash

083ecc94bbb96677ba7c17fb105e7b1917457374ba5e9cc48c412762603877bd The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1791172602574","kind":"published-quote","locale":"de","page":"brand:audible","quote":"is any of the money this \"person\" makes going back into the app?","rating":1,"review_date":"2026-08-31","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.audible.application","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (f2e4180d5a07…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.