Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“My brother showed me this app.”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
733410ca777b07fd6ce9461c8ef58b94a3cfb3d1c4f9195558be5e03090a3027
Signature (Ed25519, base64)
CtPvze6nh5/lz6UI2AzEjlZJJeDYHdjMdMPLxe/JBtX6B5oKxkjxe0wCOod/cRN14REa+uCYH3nvM0ASGNrIDA==
Merkle root
b9a08f9d6d76dd148110a496219c42cf3205c6f982800d84d5c85d77e9461e02
Merkle path
["73346714b751fd061223788081d6060df302727f4b1c8954198966daac2a9367","2eaef99a35e6e42a0cdbd0b90d576413d22dac4d6237b66c551b34ea94bbbaf2","77b3e5083ea728d6ef71eca09e248a3c11e792171a0b4e1fb32694f4c814da64","1da77ae7bf698b56782ea7fd3f49e7d506b5d02a555b055daee22984b386404f","36968164d3debd25f1492609404f660db60fb48110916082c8520ad54331b7bb","2385e4ad9b06c0e142b65179ce64acd8a955aadff95ce65e16d6f514e653ba14","d8b30a1decaf9f005ea2cbea2e7c3b658aa608e9d0fa37ec02ff98f8b00ae0f3","9a04ecfae39f4412d9f2f06a26cd4738ace72298b53425afcf3b3610532043b5","731b45a7269644597eabd80ab929f05accab88eab354194d908673a5013026cb","4664b9e1716770f7fa8d7f44159758ce0f7e52f6ce32aefad0bbf1ea0c72f440","16e76181c9e0c3e4486f4b7a6922be8a933d0a9c0c664aeebbf3709042661f8a","f8cfc666649943796cc64798f4b6be7235ebee26ef544e99b42bab2155b6cbad","8b252735b283ab7584d9f6925f08ed38c911c64db001463eafabe5061cb6f9fe","6c299608515c69a03540be35865f96ca4932f3e0403f8f39fb0e1c2e2aedffb4","43a562d6822dab12c673c1efa0a3171d1ef69b949f676fb01847e1e5b56274de"]
Anchored
2026-09-22
Public log entry
search.sigstore.dev, log index 2907673729 · entry 108e9186e8c5677a06ea…
Expected log hash
bf9a74000249ba6e66b1e29aae9d8cb95c3400dc118569a80e5c0949f3e8ac62 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1789969984102","kind":"published-quote","locale":"en","page":"theme:vaia/quality/en","quote":"My brother showed me this app.","rating":5,"review_date":"2026-09-13","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.studysmarter","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (b9a08f9d6d76…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.