Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“their support team wasn't helpful at all”
Google Play · 1/5 · 2026-06-25

Checks (re-run on this request)

✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
✓ Public transparency log — Sigstore Rekor log index 2543547848

Proof data

Record hash (SHA-256): 6de43a31dbb1f54da55c8cd240d15daf654a80f68b1771c6e1589951208baeda
Signature (Ed25519, base64): 0fR+b2zR9kn5ZZqTDA9GAArShE+VZqrtiSa+hcUVG2wDeqOsY8O4iw4+pF+R5W712IqDahhuQexpsntvXmsiAA==
Merkle root: aacc11945f125ee3fcdef86ba030016c440bcc608f4e51f0ffffdb4cdc5e9321
Merkle path: ["6de8671eb8ed60c6f1167ad2270f26d23ff7a7895b0ceae671d09d2d8c5138f6","73f479a6bc9f2eddf150a3636b80b09813db2ff58201019b5e7e62bde7138978","46fe626d68d1c5f61b25bb0c88abf97db66967d950ca14b4224849efcb25cd66","36f54df6d80a310b7bcb7ae461568503698463123fc41058dc06174fc1371122","9584eea7fc35a07ba12f4b55248f1b29375b1e9e06fb6b0a2aca7a0373282c66","0820f34589c796ef7ead880beb6cc2d1c0c24466a765e2ab4dc870f4f550b9a4","da1a0562cd9769741f9350acd8a347728bbde91bedc67afed6011b9f48cded11","8bbbf7e53352f0576edd1c5acc8156ff595409ddaea8ef10fd6ecb548d154ea4","76fcebc815fd81a9a24a26a0c4da97404515254bf582175e21d6f18e80d0a21b","3479de90abf3210e5e66d0cf00892b21cc682cd02ccc8e292c4644331eba12fb","d6a08a1e56d1d5912fb92f9324e0bd850845e7027234ade67da7263856c0847a","10417bf8400d993dc5bc51fcb3c27f6a0c34b723944b9a3d537122bb9e0d2970","a67383a47457a5cf1d5e37868e4ed4249ae6b4ada373e7ec00eea3b30391affe","b1c6c1169310bc9b3706487a8b54e13d2c5256c24253b48b4df6440bd230af21","2309962142b16600f7fc4d57273f3042f382acb91be89aac7f00112f61b58f1d"]
Anchored: 2026-08-21
Public log entry: search.sigstore.dev, log index 2543547848 · entry 108e9186e8c5677a921a…
Expected log hash: bb93f13ee7a4a636e28586b842e19662b148eb18166a89b3ae7d189bb8e81689 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record: {"dataset_version":"v1787286345433","kind":"published-quote","locale":"de","page":"theme:storytel/service/de","quote":"their support team wasn't helpful at all","rating":1,"review_date":"2026-06-25","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=grit.storytel.app","v":1}

Verify in the public log

Open the Rekor entry (pre-filled with this proof's log index).
In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (aacc11945f12…), which ties this proof's root to the log entry.
Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.