Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Everything good that used to be free before are now paywalled”
Google Play · 1/5 · 2026-04-22

Checks (re-run on this request)

✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
✓ Public transparency log — Sigstore Rekor log index 2515345787

Proof data

Record hash (SHA-256): 6fa862251ea9489ce1af8701d6d64f2ab81d90b5fdf1199f774634ab81ca2326
Signature (Ed25519, base64): +VMFbVBE/xBVJOWtNc46Awix08W8iXRvdV45sUF8HtWGEl4ft6nSua+ElHqmMPtqINkP388KViDubX1wmHX7Dw==
Merkle root: e61c2598d4d03770603e24740bcc427581e87bcbeea2e56dc34fd81a9f496465
Merkle path: ["6fa6b8d591ef8eb1d827bdf1116e2dc27d56b02b10065baded083b83f0f8dbe9","2541523d98fa4c2a1203790e8ba7ec0be6dd31f7c19c35e7de75eeac4feed479","49400e6c2278776da1b928d0c3307399e5eb1e2930e3934c02c304addbd842c1","32a999dabd31cf530d065547e8b67cbd6d716f68583d9e6a16c4f17123d95451","4138160a6c39ab4e4ad7947e4a6650a8bb9376e9d5eaf3e15757df64ae39f0f5","d8430f95a62d66ed5f37787ae8efd3525b4e46056198b8647943bc39166727d2","b2b2254624fa4c7f8887d6c2810791276a97272abc9202d1b1f1cb37f4ad0655","5d6fa80ce8e1fbd3916fba3c8b9448ec1ab4b6b8bf496903925368e7fcf3eeec","17f9a13e89d5a3b09e17898cf97e2886df4635a1e3b7007fb3e2450a392d82bd","0958985e1b9dd9a5c0a0ef4574f04df1c5a82f68b3313a65b0ce81c586bfea9b","acd5cafac690445723b3e3644ce2775e8255f307b002db7e098bcabaf68386fc","d6a60e2106352e5dc4a29403d9d5c2ba3b108dc5f0ffc3f9ff74c9776290fc3e","7f1d0c445bb13ae8c90e977abd9f4b017f1736dd8a0b6837e8297de8e292d186","f1950e4af29dd22cc94bc58ead6e376c41b02edc9ab0ebaff7fa6fa0f9bd3732","11a62e67a9d98d919358ca5b8855f911ccdc865f14b203213de31adc67657443"]
Anchored: 2026-08-19
Public log entry: search.sigstore.dev, log index 2515345787 · entry 108e9186e8c5677a749c…
Expected log hash: d9a90b5e7311041bf4315991ca7f2fbceee461daa2ae70a8b8b95323461a31cd The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record: {"dataset_version":"v1787140356347","kind":"published-quote","locale":"en","page":"product:xodo/pdf-editor/en","quote":"Everything good that used to be free before are now paywalled","rating":1,"review_date":"2026-04-22","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.xodo.pdf.reader","v":1}

Verify in the public log

Open the Rekor entry (pre-filled with this proof's log index).
In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (e61c2598d4d0…), which ties this proof's root to the log entry.
Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.