Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“they can't tell you what time that is”
Google Play · 1/5 · 2026-05-12

Checks (re-run on this request)

✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
✓ Public transparency log — Sigstore Rekor log index 3121837738

Proof data

Record hash (SHA-256): 61e078636f21e2c0bd3f983403f2f2afd41e2a12671a6d3f6df38f48f8c17311
Signature (Ed25519, base64): L2tp3i1Myn3cbWSjAikdetYRLQBPBn/bepagrMkKVEk+44mGisBRUqyvGRVSFoLPnTMA+GMyTMtTt31oscWaAA==
Merkle root: 9d32c0cbfb02966e7a561566f948b48040888a6535c058e814428126106ff945
Merkle path: ["61dbabdb1e6b84ad17e5e1a6ad2ac93bdeeff99c98441ae453142884189729a3","ea9723e2f33f412732774fb997d2ba1c533babbd87fbafc312578dcd5e76fd17","df5686a84368aa9fecc141390396320fed62af7c34a8a3d7e6df88f58a817c5e","1c29d78ce9e42c7b01d620091f6af7ff39be4992547d1fe63f3c14bf84710c29","456098dc2025f024f333c1cacd7d6474d420b981b7cdefdf0beaef3dc55da38a","b736cf16830eefc71f314980bf7cfe899222dd3f5696a1ce682ab193a810dee1","1acca73ee6fd48a29e1d859169b45bb930fab98908da68189281c6c12a99aa76","fd0143cf742cfd4bb31e44e5f2b4be3d5e95e8b72423b5e7b1740e69e2683456","1464315bb58fef8787ec1f7a547a371687f445f50f7266947a56f128bcec4af9","2b13fe62c0b65c290e809a9e9fdca3fb229888153ad21579cd5876b84cd2d00c","be4feb1fc69f4e555826aa84bc4ba620a85f87da39269044693b9164812dfd8c","de57ce495ce1dcef2c90dbc7937bf61413a49247e13455cab064ac817fe68fd3","3fcd45228716805aa85ade4544d04e795bb1399eb7a6a00746dabb625754cd90","07b2decfe383429cb71278f9069f54d1b4f607f991c518b70357c1681514c3ad","a892fc29bb3c992428927e47e35596c876cca06d89acb4ca102f2a534ba3ab13"]
Anchored: 2026-10-07
Public log entry: search.sigstore.dev, log index 3121837738 · entry 108e9186e8c5677a0c6c…
Expected log hash: a0090149b27e60cea52dd7dc5f0abf6dd7c00feef65be2874742fff2aa9e8bad The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record: {"dataset_version":"v1791340487550","kind":"published-quote","locale":"en","page":"theme:everand/communication/en","quote":"they can't tell you what time that is","rating":1,"review_date":"2026-05-12","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.scribd.app.reader0","v":1}

Verify in the public log

Open the Rekor entry (pre-filled with this proof's log index).
In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (9d32c0cbfb02…), which ties this proof's root to the log entry.
Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.