Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“This Canva is very frustrating”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
734979f6930acd588c77e9a26bd3e005c603c5cc98a3885781e8ffb25eb7b2fa
Signature (Ed25519, base64)
NeUcnArjwO2DDDg0VR0fxz8B6rr59hKSRE0Nl95x0rK31Ylo8peKGd96o0xdlze3XwKGdvlnQtHvBi1cOBkFBg==
Merkle root
6189a42bfe294c4034f316d047a716a5efecb511b8dbe64c4f7f543872c9bcee
Merkle path
["734edf187e0e5ea82b880132015a0ccd0e94c3bdb5a835ddd6abddab9967a62e","3699854eb76cc77bc0c9e9a48190de16a2dc72f37645a7eeb26114f3f7d9e743","dbf160a35b39e95100f5c0aa9a6904b316b156364ce318f218a92f65e2986ded","b79c844f4645ae4a4f974bcd4e06ee1b9826f06bf56e607f3dd64d37082eb5ff","e6d82442d0e938aa375cbc106df7855bafa3444393960d2fe96ea3e4309fe89d","03737774cb8f8acd2e1855ec1b34f65bb06c490dadd1facc504dfd28ecb76fbd","13488e28d52c4950af96767322af8bde5d457b52351d3258bb64af802821a070","9f726a6724f9c5251d021f565f97b17a418694adbc024d9200861977d52be273","197d42e14b57e61504d5a3c137530207e8a9799a50661676dbd44e9e842278f4","015e90edea46c0c94c0477f49b5c82fa6eba9ae2fa414f19526f034b6f106f4a","648379f98c516ab8253660e257771befe839e5d1d8deadadf069a32380270679","fe7f476da297d61cdab645b6310135c63fe8408e5adebc82290280e55618d546","c8bdb6f44b6fa1ffbc76cbd7bb8bbcec4d6cde88e65e58d7ec446a36de9d7be9","67223d7a85c1115e9dde948af20504ca3bc62c9ea97637792b53682f25f6d8d4","e36acd56aebd26af88e4e41e8d5bc2a1389f049dd914bc2c3da8d68ac2fede4b"]
Anchored
2026-08-19
Public log entry
search.sigstore.dev, log index 2514188040 · entry 108e9186e8c5677ac9bd…
Expected log hash
b0fc1d11450dfeabf778635bd8a8264987fbb7e682331541ce1f5d7507d4e862 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787125125654","kind":"published-quote","locale":"en","page":"theme:canva/delivery/en","quote":"This Canva is very frustrating","rating":1,"review_date":"2026-08-11","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.canva.editor","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (6189a42bfe29…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.