Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“My income and the purpose of my purchase are NONE of their business(!).”
Google Play · 2/5 · 2025-11-09

Checks (re-run on this request)

✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
✓ Public transparency log — Sigstore Rekor log index 2543857133

Proof data

Record hash (SHA-256): 3f436d76a9cc2a5de0669fa8cafbe5ef605a2ffe30b80056585ab37944a92346
Signature (Ed25519, base64): fYcS4A+pHKRVzfM3cpX1lU8j6Md07Bm1eUaz3uCW1YlHViyrnDrxcmvHyQ9i8XfO3K4aYF/saAQeEZbpdZucCw==
Merkle root: cee60bb6c0816d1bc69326ea12cf0c5c00cbea13afa283147bf24b52e30f839c
Merkle path: ["3f3fe6b7aba5701749cb58ef274ab73b1ae9d9c77e8fd3d8ab6a57bf01d81c87","50c7c2ce5a05db19bcd5ebeafa13df4de6893bea3410a545cd71e13dd0de268d","92df5d05a0e2e32f33c6b271b9a11e4c698a148787583f2b52b4085f0df2e301","6186e51a52946ffc0194428cc82f93bc2e020b6c25cc5102d19b8eef38a5cc57","fe43c763c7d3404ad8256fd9407dc0225730eef55df04a23a3625ffb851e16e5","009305b19efc4d60af0e732c0214ab485ba11f08b6982dc6d0b8e09652b55881","d3dab9efcddc121539a8b8cc720e52d98ebfc3c2733b2beba7eca563b28d2084","a7947f4575bb3293c99e83ef93a4ee83cbc8bf330c596dfc7775e333693a2506","c578e5de5e3ee00ab0767dfe080eb8eb3bd56178007fc6dfadb339277d85f094","f280a5fe49fc9c2471c75eaa4e3b2db9f0aa8a8a9d359495b12e5352573f86bb","4c2eff27b15b0754c00c575acfce9a1b9055d695a99129dda90601f430687bbc","e1fa6f392433e3742115b528fbb62d17c8e73f75e679923586644340f2657a0d","78c0401d7b513e155708f2181665b03a093a6cddbc8233872a0fe76421b285c1","806b2b46dda360b28a8a38da683f56d42f23ab9c4a7b2fa07453f271a33f5ff0","57e3801fc0af4bd2492130e334ef2d0425fdcd10c95109df38ad0d371e279fbf"]
Anchored: 2026-08-21
Public log entry: search.sigstore.dev, log index 2543857133 · entry 108e9186e8c5677a5231…
Expected log hash: d8e1ac8b740526c2915424d7f7c6bce881a4ef05d0a3a3dbd88e4c760e36623e The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record: {"dataset_version":"v1787288037224","kind":"published-quote","locale":"en","page":"product:relai/relai-business/en","quote":"My income and the purpose of my purchase are NONE of their business(!).","rating":2,"review_date":"2025-11-09","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.relai","v":1}

Verify in the public log

Open the Rekor entry (pre-filled with this proof's log index).
In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (cee60bb6c081…), which ties this proof's root to the log entry.
Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.