Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“you need to pay for the features you need”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 3241084060

Proof data

Record hash (SHA-256)

524d10eda1f3f02b3d21dcb48018146d3468e6381244f3479a60c277003bf541

Signature (Ed25519, base64)

f3o57MkcXy5nhy3LEJ0GO9LJaGn/KpHgNHN97Za9XRwvIKvVaqfEvhIsbkWdkApc8JYG4go0Bt8KD0jTloPuDw==

Merkle root

0b0c0499033d3f9b3953d31e6c838f88f12988dba810dd4de44922e1b60fcdf6

Merkle path

["524f4ea53d557e51c6e8b80c38a1e03d51538292fccbf048e5ee8248f100ca44","dc3fd4c7444911afbe21724233cc744a8726d734183bffc7dd49450aea49e369","2b0bcebb6bbc2259d7b1d3bb25b72d49aa058cbde828e4cec18466018eceb4fe","4f1cb57d671c2b6e09de86a7409a95120e9bc9231313a65e4cc35b1e5590d1d1","38a17408cc9e9a46de4fa426603333c1ad97c545274f57c762b17934d7d7e5c6","101ff391c22f588e3ebc3b4da74b1026f2f7d842bc55ff0bfae796cdc4ab37a9","c2f78473da4af61aa14d28f6beef306bcc30fe27ebeb6073cc57fd753ec1232d","b71224369c9af75d5314d0f04565635903646e5caaa0935c76ae17ad1df44baf","8d11e18221dcd23276aa9aeb52e267b9b16be458b51efc9f965a4c4ad923a16a","e3b98167ef494237973c4c9c8e6621d2cbcba3bfd7fa69657db019fe0a25a38a","7799f8c2e12ebebec2e803db59dc1771942abeef133b5e16abd4958aca8176b3","a2192486df88d4dc6da5dd9f9fe72a80fcb0210cda38213ab9466ef5ecabcb4f","fe7751fa4b9a0ad43fe0710628b6cb1b92e12eb8a60d9f17eb0c0764d693577a","8a05b9e19287b30c7fb54816a1fb848939f3f2c84b9825f19f342683d5db13aa"]

Anchored

2026-10-13

Public log entry

search.sigstore.dev, log index 3241084060 · entry 108e9186e8c5677a3e82…

Expected log hash

a291e2473f1a4510a666e020d4d424e463d55bf4677b91eb5a52e446e5ff1581 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1791865115768","kind":"published-quote","locale":"en","page":"brand:vaia","quote":"you need to pay for the features you need","rating":3,"review_date":"2026-08-13","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.studysmarter","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (0b0c0499033d…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.