Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“this can be an inexpensive option.”
Google Play · 5/5 · 2026-08-10

Checks (re-run on this request)

✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
✓ Public transparency log — Sigstore Rekor log index 3198225546

Proof data

Record hash (SHA-256): 62c5a61c344c6eeb723a4cc609b8e362d979fec78f6dd3b32e1305051e504f9e
Signature (Ed25519, base64): Bt61FHPWcXyKF5ezA7uHh6skrxm8Ol8p61Kvl2C9P8T5unTPskoOLeLOdt+OTkItpJnULh0WTvfY/hqqH3moAw==
Merkle root: 12764493a64961d0e0d426bbec64b837c2e35bc22a58920afcc56db07df6e8c9
Merkle path: ["62c370f6b70544adc0df05bdddcbd165c2ab9b6f8f60464ed654073bb7a1f607","0bfd8aef6ee9a171fecebaacc4f41298af36d3d5759b812f58f45ccb8f91262a","28ec82d721442b6771074a9fe404458e9cf5888b0de51421d1b2889ec550d9b3","e8efc3f91e945218045b343f47651fb271c1ed93600484fef05246a412e75a58","b40404bc7a25bb872246e85d8d5f3d94eee1b272b012b0f5ca499256f3ecfa53","22eabb7386743a22c1501d9c4d1c9018c5aa1e5facd22b4f18564e87fbbcee14","9fd7add6552a124ce5cd91166bd44658d873444a801b94e8b4b07321e825aa39","f1e23aabb43c9cbd0f3dc4fc5ce101b54dfd7b57cd3efa14af289934174afd74","537c7ad40236d928026d47b71e460eade11e3ac354c0e37e2e4210cc2475ae6c","8dfabb5d56e23b271bfdee2a104d4d936b4856fe3f24c2f0e5c2b6ee0a10c1d4","d07998f850d98911907cb88749103afc4dde1d205651b8bd703b83807cf0bac2","807a98c3fb79bc9d6a831dc936d19e93892cbb2573be7ecfd5bdc993def051da","0a6744044d43ce91eeece8e7a40b34c6faf131deafcec67ce79a193702d62650","bf01790763bd70681430a2841b8504c59b88918b5b88c9d70f6ee7041d7ca6c8"]
Anchored: 2026-10-11
Public log entry: search.sigstore.dev, log index 3198225546 · entry 108e9186e8c5677a10cb…
Expected log hash: a11b46fc63b94f32c49058752856fbdc4e92f7a41d4e67238e3563657fcd50e4 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record: {"dataset_version":"v1791685609571","kind":"published-quote","locale":"en","page":"theme:everand/price/en","quote":"this can be an inexpensive option.","rating":5,"review_date":"2026-08-10","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.scribd.app.reader0","v":1}

Verify in the public log

Open the Rekor entry (pre-filled with this proof's log index).
In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (12764493a649…), which ties this proof's root to the log entry.
Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.