Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Sending Bitcoin worked well.”
Google Play · 5/5 · 2025-08-01

Checks (re-run on this request)

✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
✓ Public transparency log — Sigstore Rekor log index 2524810465

Proof data

Record hash (SHA-256): 39de5ddbc04b82da5e567dd229f79cf0de18f00de35cab9d8ddf1d653ac9244f
Signature (Ed25519, base64): +R89qDVO77GERNzGGj+UqEmbOV8GkhnZ7GqthhYYO/oON1exO5nibY3IVD4rHmwmgBS6ZZO2lUsJ5TWEsxigCw==
Merkle root: 3e1c67438f658ba7fd015e6979c1bfd82d90efb0848cecbd4d902d6b2ed171d3
Merkle path: ["39dda8d42727f11c22abf2b3a5618e423e253d12deece217491d792036415342","8049c756693d6bab6869a5f762721edac868a93d3575368bbae066cf597d8b7a","c3fb60c2909583b00c1aaaf5bc590c90f009107b19ed7ae98f1b5af8d9f44d21","255849d0336f6aa3090db2ddd37ae53a101727eb945222e62368fc55d106ff0f","532ec487043e0079f2852cc90b52e028afe52a42d10dfd114ff6dc4e36bb39f9","e56b8b544166fb3632417ad5f4f0cc95172480f5f94035caf7c127920bad40b2","8ca4ca808390a92252af89be567a24a15e373abc26b7fbcdd84ffb4431ef23e2","e1c89b4f75c72a43943c9959e22e3a425e00df011d5eec2ac1eb0dd358c6f15b","20b4d43fd165553d53addab903a254ba3da3c957a533d183d8ce6aca6e89e8d3","3f69687f3e305809ed8151fb7da4b91398a74e7a2a29d1f54a1b8c5dd06b4b62","bdae66ff4a3fe1d79c042d5afa32d95c13e3b46cabc770eb69125cf93e8a719f","32a89cb659daeca401eb2f8787a55894fe50ab0398c530a5ab8c55ca4d41890a","dbfcb3d5021da50b8b4634be051dbf46681ebd2b647e213f1973335aec3749d8","0790a9ec23117ba3e0ba9a310290906a4f1d2b0055d4607b106ab21651087c1d","db72b82118c1e08b77018004fa72584377d6eccdc4c75ec19bef6a78273f75c9"]
Anchored: 2026-08-20
Public log entry: search.sigstore.dev, log index 2524810465 · entry 108e9186e8c5677af074…
Expected log hash: 129b219cb6155ac24569a579c61e8fc9cc2d89305732944b8849d5e719dfd073 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record: {"dataset_version":"v1787193927339","kind":"published-quote","locale":"en","page":"theme:relai/delivery/en","quote":"Sending Bitcoin worked well.","rating":5,"review_date":"2025-08-01","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.relai","v":1}

Verify in the public log

Open the Rekor entry (pre-filled with this proof's log index).
In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (3e1c67438f65…), which ties this proof's root to the log entry.
Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.