Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“dont waste your money on this”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
5d1418a48619cfac34da7e6356a77cb79115b2934c11ec77f70a422ea24945eb
Signature (Ed25519, base64)
50CpS6qE32PZ5qzpIq986LxWTfATRJOY0zcaachB9AzFkTJTI8xGaLTgIYryoPmx9kb4GoogLBPqQCDU9XuYAA==
Merkle root
0fdf8a945cf322eba60395065bdb38bb3eeb32c52e065b6c93c48bb56aa3bb91
Merkle path
["5d17a7197bb6467b8d08b193d5643b8f762ecc343b5dd890f31f4656f0faea1f","01bfa181178fe4dc2f6110db264b3282fc9c9a4d5062c1c845d54d88f86292f6","59d36fe2a66ef3d377629d5d8c1fb25d6de4dea281bd0888881643ee20014f55","274eb651f319fdf4ead7bdac5d46eb9f3ed9305831a5151429ee3577f16388da","4761cb19db09dd105cc29cbcb5c9410f87f3d01bc4a26295b579349220938c09","481d2fc022af332a702befc86488639de11d943635e4836037a6129859b427ba","dcfda8268e12ae3e9d1da1735d3dff6b35dd8771ef7dc964ec333d855b1e04bf","a06b006798a842ae87cafe180a14ece5ff11a32450f092315260320449b6a683","dd499da5849e5e9683e4e3f644d8214b6f124dc10fcda33e2f96deee2feb149c","80bf1224e2a99d745f86fbe2d70c38f480b9d9790f936fe29a709d69c76d544f","3e8e40011e11d1b0b0ae1769b588d09564f228f34fa6104fb0008a3283abfead","c21296911f80363904dd86e5ad055163e0996f1d11b3d9bbf491abbb253c7406","1287e5f962cd571f763d148889a66e1c7e5d80d0683082f38f7f966b33f27f74","d97c31a576cd351fb66ddffaddfc87228fbf93ecf06301d5b8aec9b37e0fda68","31e60baa9fb8f672f686fd126d7dc82498bbfeaa38bc676e67691bf1c2c7c210"]
Anchored
2026-08-21
Public log entry
search.sigstore.dev, log index 2541942774 · entry 108e9186e8c5677ae0bd…
Expected log hash
4825ba618d3c3368179be13912e101812df871de37f30b1ec256ca6d987713ec The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787277864570","kind":"published-quote","locale":"en","page":"theme:xodo/price/en","quote":"dont waste your money on this","rating":1,"review_date":"2026-06-18","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.xodo.pdf.reader","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (0fdf8a945cf3…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.