Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“restarting app works for a bit but it starts doing it again”
Google Play · 2/5 · 2026-02-27

Checks (re-run on this request)

✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
✓ Public transparency log — Sigstore Rekor log index 2543547848

Proof data

Record hash (SHA-256): 6a43a3919320456dab79ed0e0be6628f08ce51d958fabbc0514c3d2e635c4c72
Signature (Ed25519, base64): kJstIiOUp5cfAXUwxG81LWlHaKT8dZxD0wmM+2b5cnKSmlYn7YAVIyPpe8rk47mwy2SSsoQYL5gsg6CavAEjBQ==
Merkle root: aacc11945f125ee3fcdef86ba030016c440bcc608f4e51f0ffffdb4cdc5e9321
Merkle path: ["6a47da7b40efb26d627d37c045fd4e16734d59877cc25422a7bb420c53d4efaa","4f0586c822cb852cb486cb3c39973ae12578d3301b0147a43175a060707c8f51","b3bb78afed803bf36e03dbedce0e5aa8627ab5f18b8cffdb4ab0c45cddef6011","86db2476484cd28c1e4d3b9b668aefbb739f1bfa3e13a18bb758a0dac7ed29c6","7539c07fff828c1ff6b975cc90f84c84d859d8a315dbf7fb51942c4e710b65f4","65322635abf6718a7d3d79309889f7185aa57ea04ebd7c09cfa7b6a01efd309c","4e50766ffede10ee43f99e322b45a65cbe780a1e7402478e30855d66302fefa9","4a829685bc9eca3769d8e6a54f116c5d9e39da1c7ac6e13ef16d8c8d276f4a44","3b4819f67b6e3eb4ad43c422f4badaeef0d861d6ad04721b55a6488786c35e42","a75f874cbba5e4dd3bcbbee62bb2833fb4489fdea3a5a5367837748f907fa7d9","02a5ea4f3197332385fe41072b523becd1651e68a5ab126f089fa99ed22d0ad9","10417bf8400d993dc5bc51fcb3c27f6a0c34b723944b9a3d537122bb9e0d2970","a67383a47457a5cf1d5e37868e4ed4249ae6b4ada373e7ec00eea3b30391affe","b1c6c1169310bc9b3706487a8b54e13d2c5256c24253b48b4df6440bd230af21","2309962142b16600f7fc4d57273f3042f382acb91be89aac7f00112f61b58f1d"]
Anchored: 2026-08-21
Public log entry: search.sigstore.dev, log index 2543547848 · entry 108e9186e8c5677a921a…
Expected log hash: bb93f13ee7a4a636e28586b842e19662b148eb18166a89b3ae7d189bb8e81689 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record: {"dataset_version":"v1787286345433","kind":"published-quote","locale":"en","page":"theme:xodo/durability/en","quote":"restarting app works for a bit but it starts doing it again","rating":2,"review_date":"2026-02-27","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.xodo.pdf.reader","v":1}

Verify in the public log

Open the Rekor entry (pre-filled with this proof's log index).
In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (aacc11945f12…), which ties this proof's root to the log entry.
Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.