Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“I checked for updates but I am current.”
Google Play · 2/5 · 2026-08-14

Checks (re-run on this request)

✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
✓ Public transparency log — Sigstore Rekor log index 2542342116

Proof data

Record hash (SHA-256): 67d495f1b2ad23948ae5feb1a8a9786087f50dcfc82469d5ef36bab827e0c01b
Signature (Ed25519, base64): 3CWQoaWzmJzwhnTg1LbdkDrBiS0GTch/5CCCS0mbu3ckRTHZcA+T9uWwwpX5k5pa/6ZCKgSvnzyB3WWdOyOCBw==
Merkle root: 13d851a0949e31431bfa3cb9a632b995c3cd1c62cfaf1eda783bd9224fc47725
Merkle path: ["67d3f7d06dd6174bd29492e7e46d3a80bbb4ff9ffeece78fb06507743cce1b8a","08f49eb80d2558a3fc6ee9b260c98dcd53f67621c5e31db5f1abdd66a7f3a4a2","2b1b04c67646c69cd77d36040f9b0c9642295a599c82f728a2afd40599bbfa35","7ccf11e884f49142284780732441969550897de9e12bd17fe79a9c27326c65f9","fc6c6b131ab8096122c6e3374f1c8b7816da0b0ab4effee5c28e6c6701af5f34","07afe3e524dc6dc7aaeb308e643c778b1fe2b009569f5274fabdea643535f380","e97101eb5079d76652e75000584a556e1a3ff5d4d26232ac03b48b4c5b0f5c6e","f6acaa72eb35f74798251291af9965ca5816a6c6b0ad7fb794cefb2839636f6f","9bfee276a15547aed503ce6523744bff41cf0d530f1e16b38a0c253eb22c1ee0","2c9bdca83d45b5d2dfe9aa295f8f5ab6956f32a98bbbfb891782ffe1c0cbb1a8","4d9d045b34f5b7672bc513284ef1e8c359d4682a872efe9a6e6830ee2c7ff7ed","2e4cc4cc9f254585d592ce310b06ef87cd96eee21f75a167ff015e1181264220","a85948d94666cb760325015d876c34467e4e9a308fd736b88b45334d957c084f","8794a267e94c305c4d11faa8a55bb3d3523fb52e75ea5ecdc366a6e906d9f7ca","bc9aae2a90fd8d311435fb1459ac7953f7f2923aa1b697bb0b40101796e3503b"]
Anchored: 2026-08-21
Public log entry: search.sigstore.dev, log index 2542342116 · entry 108e9186e8c5677a49dc…
Expected log hash: 44bd329b5c5f42e4fbaaab1e9a27845aedd26351446bc96ba12b520a563b7433 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record: {"dataset_version":"v1787279544668","kind":"published-quote","locale":"en","page":"theme:audible/quality/en","quote":"I checked for updates but I am current.","rating":2,"review_date":"2026-08-14","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.audible.application","v":1}

Verify in the public log

Open the Rekor entry (pre-filled with this proof's log index).
In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (13d851a0949e…), which ties this proof's root to the log entry.
Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.