Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Yes, you can also merge both Tool bar with the default bar”
Google Play · 4/5 · 2026-07-16

Checks (re-run on this request)

✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
✓ Public transparency log — Sigstore Rekor log index 2514130917

Proof data

Record hash (SHA-256): 67f87852946ceffe1da5ac0fdf68c81fae1159152093694f04fa9f7af18f6613
Signature (Ed25519, base64): ocfaszd8jcgdnIvHJSpJYAJnmmXLTJiBXzHN5EG+qMXUlSR8PuBpDprY0J0yrL1pYFhoafT5WnTHJySTAS37Ag==
Merkle root: 72711ef72b8a7ab084630b9628ceb2defcf0aae546304d44ed173db57929457f
Merkle path: ["680257a70d1068c3cd244e46cbc4e297d64bb46c003f24ddbcbe0fb4f228b43d","a7cdc41d1161dba4411e12a0bae21b0216a07641d2b7f845b258ca898bb7ab4d","b41f15c95529bf9f07719e852ff6f968e93edc0ae30b521ebf377d8853119f00","ba347862cd81ce97ec4c2200683954908b2c3d3b2774e6ae7415a7ab5db82207","545deedb4ad1720029d59e8f4a89f69cd8105716493ad0ee26428d71a27636b4","49bb03330429880a1265696238d393b627aa12034d014514ba0ad67dd3906853","6f71276b1243b8b2f3e54a93a7efe8a31e684de28f22d1336d41db4f90c86ac6","aa7b8463b237060fe0610d99c99eafdc86ebd8e10c561f972068f2f40f7fd782","59b2c69154063222d45a4665970a2e2421d2cf9f7b9ab2c2783ff4e4f26979e9","ee28afca71a374afa8392ab7eea5d0ad747a29ad9d0e038518384261b40e5954","7fcf4e3d069efe3de1c33bf972f46858509f6cbdcd7bd2d2ad9906f6ec5b3fe4","6e631fb50206c82aff86c6bc351b06878fddb3186a7413dc6b340b72c8f2138a","00d96e4f5844025cf94031a68b6b1f85feeb1eba15fdbc00f57e844b9bbd7752","bd788a9b6485b033101398a3aa9df1787f225fcc2ec7903fcb31ee65f6cac6af","6eb04938b6a483bb163369a1d918b32576dde0943755b89bf4c6d18743828ba3"]
Anchored: 2026-08-19
Public log entry: search.sigstore.dev, log index 2514130917 · entry 108e9186e8c5677a3273…
Expected log hash: 65ba51eff926c65ed0ce093a942d84c628d811a59302f32867c6589627e47792 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record: {"dataset_version":"v1787124488047","kind":"published-quote","locale":"en","page":"theme:xodo/ordering/en","quote":"Yes, you can also merge both Tool bar with the default bar","rating":4,"review_date":"2026-07-16","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.xodo.pdf.reader","v":1}

Verify in the public log

Open the Rekor entry (pre-filled with this proof's log index).
In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (72711ef72b8a…), which ties this proof's root to the log entry.
Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.