Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“it annoyingly refuses to play when connected to android auto”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 2542342116

Proof data

Record hash (SHA-256)

6b149c053d682a27e4760964b2ed5b11471519ebad446ff8527fe658573003c1

Signature (Ed25519, base64)

k0uZEFm71u9zQMIixYXwzuqtuvc3Z/eViy4uOJS5sBrtHR3nRd/ACb85t+NuaC00KRMQgDgWxQQ3EGKA2Vu9AQ==

Merkle root

13d851a0949e31431bfa3cb9a632b995c3cd1c62cfaf1eda783bd9224fc47725

Merkle path

["6b20ba770e5a40f9b6daa94e85d9ceea2631e291371616b9f0f29dbcfb0b5c5d","bb57db108226cf2100645e7457501d49291b02649c0147fb2b0f713aedf7610a","31420a01a24676dce0bf135a8bb701e7d9412977e8e7f1ab9eab2c77763021dc","e50837d3a727c55a92cc774873e3f79366d95889125ef4e5ecfd39cef4974db0","14bd8a447ee338c5f60a0c527d68a0fd77ea78599b62fcbf417b15024fc53f31","c0754d146928a132bb1ac41c061c9e76312d7083340b688694cccfa25eca9d72","4559d79af2becf3b5ef424b33a5661a56138cd4edfd3a7d491c13dd16d830bfe","27c695538d1e0835570001ee420f00d3909ae33b8a56b26773a0acbadf4edaa0","4147ec96080fe165cc7113d5ab9f93028265f3b87892b2a09b79d3633c32f7b2","90a41a050d122b674b1da16427c82eb02e6996b707aa750b8855c1387d2641de","4d9d045b34f5b7672bc513284ef1e8c359d4682a872efe9a6e6830ee2c7ff7ed","2e4cc4cc9f254585d592ce310b06ef87cd96eee21f75a167ff015e1181264220","a85948d94666cb760325015d876c34467e4e9a308fd736b88b45334d957c084f","8794a267e94c305c4d11faa8a55bb3d3523fb52e75ea5ecdc366a6e906d9f7ca","bc9aae2a90fd8d311435fb1459ac7953f7f2923aa1b697bb0b40101796e3503b"]

Anchored

2026-08-21

Public log entry

search.sigstore.dev, log index 2542342116 · entry 108e9186e8c5677a49dc…

Expected log hash

44bd329b5c5f42e4fbaaab1e9a27845aedd26351446bc96ba12b520a563b7433 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1787279544668","kind":"published-quote","locale":"de","page":"theme:storytel/service/de","quote":"it annoyingly refuses to play when connected to android auto","rating":3,"review_date":"2026-06-17","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=grit.storytel.app","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (13d851a0949e…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.