Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“The app is very good”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
41376fc6fce5aa4aea9854038d63fce5c5a843ca680950f0407768ebe835d33c
Signature (Ed25519, base64)
Y7+gVwOCy0LZ0m2rSN0qH8TCT6bMcbQ3RJUKfbGbM70wZcpdGX778mASvOF+CbOR2FFkjCdfMQ9Q7pReLMlHAA==
Merkle root
888a38c73939ec95e6f226dbfb3637325026fcafc5a795aa4e227b811d6b2c84
Merkle path
["413e0c55862726c10d6f2812455579f9d41724d402079fefb7218debe2de8c74","2901c3e3e4df640349f692080e8ab39e61c54ea9e0d2cf9d349190c7dda50247","886de46061e98756ed0cb5146169475333b350c42e772d78e2c063fa98049889","277185eaefb57e59957f27574c3c77d5672d5b0310a9707b6eb829e0f094ef2c","379d78cb692d568860f8f886c90bf0518d5b160f6bce51cc1b1ca7dac5072a1f","e3bd1411a44b06019be0319b26d71fa30e2ad4243f70e741f8aad7fc47a3a52f","c59eedd1b8a9a0e4e2246a15981224b014af6fe58a3fc2dae543a10947fb5a59","26dfd818e83d757e5e7225d26e546f7158e0a5403240437e7a817bbfb018d710","52d1e1fe2fa29cf428e9b2f33262cd961577934516986e3c6658856cfa8b0806","430d470e02f3bb75826f2b4861db67d1d24c3ce14285b0c1be6f059a28c52ec4","98b53817122fc86b6561e134e40b506483d29662f54858e04123e9f55ec0106c","cfcf82b47bc6a006b7c11e5183fbaa666e00ea4d950e64e1f574bdafde8e1583","410ad2e8ec6f218bef120c1cded3462a092f61baab59fee462fd9704d436d66b","f46648ad2fd9f2769b9fc0ba1c434d2040de67cbd8b7a61df7b7575cd5a9206a"]
Anchored
2026-10-13
Public log entry
search.sigstore.dev, log index 3240231023 · entry 108e9186e8c5677ac0ab…
Expected log hash
bc440cd3136178aee800fe49b9cf2e319542a645c9abbb8553c6ae1e354ce201 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1791860805798","kind":"published-quote","locale":"en","page":"brand:vaia","quote":"The app is very good","rating":4,"review_date":"2026-04-08","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.studysmarter","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (888a38c73939…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.