Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“what if I didn't like it then my money will be theirs”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 2542879916

Proof data

Record hash (SHA-256)

73403c33adcbc8abd7a229f220fac4f21ecef8a9b0c2bf8757e2e89fbadeadcd

Signature (Ed25519, base64)

RZChtu/NQl4VWEEzIsOAiLk2RpZgkPqwbMsFq8lNYi4a4a1kf/aSk0XstjBQefhSnxzBx4n638wIuASDFLk4Bw==

Merkle root

681242bb8cfa94d3b60cc06de1bbe3e5e124dc1675276b11df0aaabc9faee58c

Merkle path

["733b45cd0d1e7348bdfa0ac910da89fbf792e7c130ddce33090e6f2122e62767","f4756559d869d58641d2b7424bdf4d03fe0afaea92247c94bde562f15081e168","6775b85f4e0675ff3f2e1e1db53f8e78af916d3a231b28df88dd0701642aabc6","185176a2c9dde7834c3d7bdc356ee517046fa5bd4096ecfa8be285778d9843f2","c0af244f5caa378386c5b69b64b66e312533084bfeebb346486eeedcd61d6299","a49c69c50d49706bb64a669cb9eb7340569d1144dac038714b80ed9f68ecf8c6","59a349a521907c942668995ac37d5687d5816ba50442c4e6865e5efd4b702924","2c64b0deae56459b982eea715ee372c1d01d57c476439c378fd22ca3c8398f5d","035517038a2619815f7d88e68f8ab9e5e664831804728756ce1629b03abf5faa","a950c953e02cfbe0bc344082f28a50f7d8ed500d3aafc1d104a81de4fd6c5e3d","b6ef43d38957ed5969e5af54c825e6bfed51efb9dd844dd7f23da6760d601ca8","f44be1811ff0bb195f5fdef3c493187d1dd9ac5bcbedba4371f021a93bcc8365","b8686ad1f3c76af9372c49f04594bb5fe4d826cc036a375eba0c663f521c54c8","ac4c7c6db85c9df99401fda1075a3bd42dea9188ac58b0911e04bce8752d56c6","78eca2193b177c5ad7546ff5d365dd6cb79efa278dddff5151740888f319c0e5"]

Anchored

2026-08-21

Public log entry

search.sigstore.dev, log index 2542879916 · entry 108e9186e8c5677a2329…

Expected log hash

8337812f20bf1207a3c96eed87ab975d7e92ac1421dcded24507b32e456b788f The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1787282728402","kind":"published-quote","locale":"en","page":"theme:canva/returns/en","quote":"what if I didn't like it then my money will be theirs","rating":1,"review_date":"2026-07-31","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.canva.editor","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (681242bb8cfa…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.