Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“you need to pay for the features you need”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 3198225546

Proof data

Record hash (SHA-256)

378dd0326f8f198db4e6db8eb552f7765e35608059fd4b33c054a756865f967e

Signature (Ed25519, base64)

s+GrcNj/m7gieGPQL63QR83mo753yyP8dfvJKXYBaxu+PS3nq6Y0PIRXZUEHoipiut38q1mdEkFMY7ORPx8EAw==

Merkle root

12764493a64961d0e0d426bbec64b837c2e35bc22a58920afcc56db07df6e8c9

Merkle path

["378b30795c111ba3ea2ca1c10258ef8aee2509da8ab822f1c36fe1101005b4a9","ff1d295c4f32b310b012a18bed521f9f158d628410c3f4b84b37a9fd04c26b41","76ed94ff1346ac0b4ef8b94bfae05294021ea555e8ded3056deb4bf8006c0e92","cbe65215de2698572b477837e96c78b6747779ec6ff4cec08e0f2c8889a07a6c","0aea3c0809fc7b498d37343c552949630eeae6a5ab86c59855e9eb1f3104a53c","4dcad9437ba14a00d48eb0c049ee81699b6c35dc597e853333cfd3691eda78b1","8de7cfc41722af09d2b6db782a54a6e4e7f51e4e2a0893129daa3510fbd68daf","714c7a06d789bad9b5f878a8cf895db95f04c7e651427a0bc66c007373dcdf6d","81c45d71058f93fd320fe069293127d4597b2f8544075d0062e4ef0d424440c0","845d2b9aca9b9ab74d092f1396d90769947590487521ec7fbce144ebdb46fe5d","850f40bca8479fb76723330a998b26e893fdb60793e9f279781b0ed6032b5058","b52a8a3015ae5229f5a7205f9433251f53bb2b22b2f3bb0bfbb3deb2076f2c89","b6c6b7aa75be4fd4f206793d7c98702963f427cfe45d9c46972416cafee9a131","bf01790763bd70681430a2841b8504c59b88918b5b88c9d70f6ee7041d7ca6c8"]

Anchored

2026-10-11

Public log entry

search.sigstore.dev, log index 3198225546 · entry 108e9186e8c5677a10cb…

Expected log hash

a11b46fc63b94f32c49058752856fbdc4e92f7a41d4e67238e3563657fcd50e4 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1791685609571","kind":"published-quote","locale":"en","page":"brand:vaia","quote":"you need to pay for the features you need","rating":3,"review_date":"2026-08-13","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.studysmarter","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (12764493a649…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.