Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“only lost 3 of my 4652 songs in my playlists”
Google Play · 5/5 · 2026-06-03

Checks (re-run on this request)

✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
✓ Public transparency log — Sigstore Rekor log index 3241084060

Proof data

Record hash (SHA-256): 3442b64fd6703175d1319deb5201da82e82df5911f8137ec6a09a8c2e4a514c7
Signature (Ed25519, base64): U2ABd13twloHnSVnHfOn2giBNsPSUw5bTRRGD/mceKxJAimn4T8r8MgFCrQxGwJlVnxMVZfFilrd/i6lghhoBA==
Merkle root: 0b0c0499033d3f9b3953d31e6c838f88f12988dba810dd4de44922e1b60fcdf6
Merkle path: ["34413943025d013edceb3a870cab754dc986f29bdab912083ba83a218150f92f","dae0bfb313731ce92996a5ee3935533eadc659266a4b3f9cc30b892edb1c26de","e52ee4fef90888654c84f0c1aac5ebd83b0c84a764bd17c9ec0a9f1816e40770","1982372b606a114d0b1ecd29c4c13fde587094c251d49a45db686ed2ec95feba","cfdd65c8a061f2f129e17e09dbd02fb462e98d423cd9db6035cceca67e9d2dcf","7a2609e127f5a88797d76dd36dccd60ebda86831a86d2939bcc54a82878eeb12","5640e8f5e7d54d88e9b6a33b0ea8ab35a39a8b25cc5e919a54f5a515989782cf","634b09f062716d19014434cc1b30245127ab22203e8bc2934cb22a9aee9d1409","0af8d875e584c7daf99f3ddf01145a32aa1bb0a65be311c17db151b77c6d2a58","a94788bf178bc1e727f0ef1217ad8966d66bf9e31d1bd1cab9bf6e5a8dc6419d","fcc462e15b27af6461b91991c283826c6009da04d123128fe13ce19daba55b03","a2192486df88d4dc6da5dd9f9fe72a80fcb0210cda38213ab9466ef5ecabcb4f","fe7751fa4b9a0ad43fe0710628b6cb1b92e12eb8a60d9f17eb0c0764d693577a","8a05b9e19287b30c7fb54816a1fb848939f3f2c84b9825f19f342683d5db13aa"]
Anchored: 2026-10-13
Public log entry: search.sigstore.dev, log index 3241084060 · entry 108e9186e8c5677a3e82…
Expected log hash: a291e2473f1a4510a666e020d4d424e463d55bf4677b91eb5a52e446e5ff1581 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record: {"dataset_version":"v1791865115768","kind":"published-quote","locale":"en","page":"brand:deezer","quote":"only lost 3 of my 4652 songs in my playlists","rating":5,"review_date":"2026-06-03","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=deezer.android.app","v":1}

Verify in the public log

Open the Rekor entry (pre-filled with this proof's log index).
In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (0b0c0499033d…), which ties this proof's root to the log entry.
Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.