Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“then I have to re open my scans are gone”
Google Play · 1/5 · 2026-05-16

Checks (re-run on this request)

✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
✓ Public transparency log — Sigstore Rekor log index 2542879916

Proof data

Record hash (SHA-256): 69f084ba496235046221dde3efd3ea020c269b5af25cd2c192520d11fcf8d8fb
Signature (Ed25519, base64): zH8iul3DpQ+qUxGndV34ErM141lFBai4OJGwlQyGIHg7YiUdFlakPRXDsZVrKTsGmYP4jm47t72K10U35lZvCA==
Merkle root: 681242bb8cfa94d3b60cc06de1bbe3e5e124dc1675276b11df0aaabc9faee58c
Merkle path: ["69ecedba7df0f6f29603f5fa737eb376115fadfd64a299ab9ab6ed64d3021f24","913b82b36a95df3ddad327a41f4547a282c1123f88db6445132f7e5e7e981646","08b714f46c2591984ba18f0697239a2f30753c34159db10b1c98864210d43323","78ae8d8e8267d9f586792da68c9cd030820a29abb8f846167138ef84f0660341","346df902dfdc44cc6b816032e7aded08c7d89542858f99586e7da4784541db81","17156479a3217f7549c0764f786eaaeb6507eaf40b044241ab621533c1596840","7332515ca2a85255972fccd61de98855a2187c292d5fe8effc7ec74d9a7d1de5","45f9405ec63ad9d82a165ce47d196dba324dcd468660c629a09043096368e3ea","d33fa9e400799eef284c77f613fd752a2046403667707497ee28f919db1061b1","d109f1cf25a14f43222b5598e40b60bec79fa55be73eb4e4fb7ce6660614e327","032be7307d5db4b79cb5329f9b3de2ef3a6e3543bd6b235f36cca22303365eae","f44be1811ff0bb195f5fdef3c493187d1dd9ac5bcbedba4371f021a93bcc8365","b8686ad1f3c76af9372c49f04594bb5fe4d826cc036a375eba0c663f521c54c8","ac4c7c6db85c9df99401fda1075a3bd42dea9188ac58b0911e04bce8752d56c6","78eca2193b177c5ad7546ff5d365dd6cb79efa278dddff5151740888f319c0e5"]
Anchored: 2026-08-21
Public log entry: search.sigstore.dev, log index 2542879916 · entry 108e9186e8c5677a2329…
Expected log hash: 8337812f20bf1207a3c96eed87ab975d7e92ac1421dcded24507b32e456b788f The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record: {"dataset_version":"v1787282728402","kind":"published-quote","locale":"en","page":"theme:xodo/durability/en","quote":"then I have to re open my scans are gone","rating":1,"review_date":"2026-05-16","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.xodo.pdf.reader","v":1}

Verify in the public log

Open the Rekor entry (pre-filled with this proof's log index).
In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (681242bb8cfa…), which ties this proof's root to the log entry.
Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.