Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“It is simply transparent and automated.”
Google Play · 5/5 · 2025-07-30

Checks (re-run on this request)

✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
✓ Public transparency log — Sigstore Rekor log index 2514629481

Proof data

Record hash (SHA-256): 3418f55f71bfc4d5e172ff992d50df7899134b68fa19ff49aa4e8c48051e6058
Signature (Ed25519, base64): c3a08+Obnnd0yAp5IvxDUQXNBEm4s2ybPRnRoIsHjZp80nKZ4Ahi6lIc5FaxoPnAC0ordbx4xhMprLTAiFdyCA==
Merkle root: 3aa12e5b2bb49befac906908c9a841e9a421f12d0bee8acab9c1f906487adff2
Merkle path: ["34189502a40eddb0dc07b59632009e132264b7c937560c4d20b10c9b9cd5e27d","840f311aa816ba3b95fe917915814d60fb7e7c26f39fb31e94dabbbccb16de98","266c32f76f816f3a3af55670e8776e849bdd3e33e6dee9f4c16d301b2c168256","71d5dfc99c8f3c31c4b1a50427b0541c8ba82b2835fa68da586a31bff27a11ce","dbceb06042f6560b5300546053bd64bbca32676ffb892d311760733f1c786259","11e3a3d80e7e66d64a66f2b933244f01753c5af7be6a951e4b3acf4d2ee492b7","e7515ece3d1edd2a1f2d22b5fb3c70be0f62c9f19ad3dac9db7ca53cd50fdb46","f5d4096870128da41d5cd3836710cd63415d5a48c9f441165d08823c01736dc3","2623e9c6ac1051169ef6e4e935a121f405e047d1ea493b382b3bffeca2b7856a","7d45d2c9e7fc21890331d925d36baec9259c1a0a87273ddc08c33c58e17c41f1","c8d60862b4e86fe489267adea81131a7e5e3a271455c67cf574c10273904c2da","c10bb5f46eb36cf36fed52cd233de54b10d44a15ea6a5071510334fc522f0f27","a0680e646c3acbbabfdf8601219a4845c3cdf4b239e192c7eaf9f8e26bcf7dbb","c3a6c334f1acc8c0b843c5d43c85ce54d647d519ab035a8287aee565097a2ae6","6099970369039e9ea9943621e6c4ddbe6cf64be652afb6debc70debb01455286"]
Anchored: 2026-08-19
Public log entry: search.sigstore.dev, log index 2514629481 · entry 108e9186e8c5677a8c32…
Expected log hash: d923130994e40329302180560c0ed5b43e4400136d037befc932b83910626f34 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record: {"dataset_version":"v1787131980797","kind":"published-quote","locale":"en","page":"product:relai/bitcoin-savings-plan/en","quote":"It is simply transparent and automated.","rating":5,"review_date":"2025-07-30","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.relai","v":1}

Verify in the public log

Open the Rekor entry (pre-filled with this proof's log index).
In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (3aa12e5b2bb4…), which ties this proof's root to the log entry.
Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.