Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“I absolutely love the app.”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
760bb45e273460c479b9c17bacc063ac5c5bf236e53db001ab3e6dcd56525cc0
Signature (Ed25519, base64)
uhiwO0qJbIykRrwZQtfd297ndQn+VmTeBotaJ5Lb7g/M2T3I2hitJhzsh/03a4IHBqV5EL0lVKauqLwdcVj5Aw==
Merkle root
277f678086a68384187ff29b395b0fdaceb8fee69b57cef3cd060bcd7a85a6f2
Merkle path
["760e80554b0193e1eaa57b7e7c7f54e1e484ff0d6d5be7c98e9130d60634c344","5a6a68305721071787dbef08296b7d4baae3b9cc1989f041d1d0ca07b389962d","397363b708adf2676947ec901fe20e2ad152c106e5c06b077f3602fd9b77a6dc","38a6719ffc40195135e3254c2ceeadba62dfc5b1652db485f41a3f74dfb3b12d","43e8e2d4b61c8c485b571faf9e45de64d38a65e4214a33c8d6e21844c94c8076","4837ec9144e6233266b5f1a87ff25cb5fad9e7c98c591912b07f06d5795078d3","cdeb18c3753c8ad772d9775d7b50d58acfe926eabcec6c2d623ceb9315fe48db","3ce188777044a4f20f39a161809209b89d3cac1beae65c777f4ae0e60d5e16aa","0ee5bc15f9bd5055917eae93017ab785d13300e112f8a0fcac46f2e99963a2ae","60366617427583478dac141fc44c4582e9235c63a2db2ba2cdbc7fb5e8131a23","1e37da151f76fa1fa85d6cbd86a54a8c82045bf04e4205c367f218b7dbfbb029","d6fdaa57e40c81a651fe32e650dbfc00fecab21e8ba71bc260c30dcaf2f68ca4","3a4557370606b510c9a2cb3a2ca3671efcf47160eb4264ac3eb8a4e9a9f5afbb","3877db10b6c6cae54d2b07bf0b4ebaa05236dbdf377db3895f407f63dda42bdc","280ab60d4c161cb719b6156fa9102f006908a25889a024565b61c42f89983a6c"]
Anchored
2026-09-24
Public log entry
search.sigstore.dev, log index 2929513415 · entry 108e9186e8c5677a8264…
Expected log hash
9e91de35fefec2dcd249a303ecf0c84a118a9b2cf5b39f5a9ff4368de67598cd The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1790137911951","kind":"published-quote","locale":"en","page":"theme:everand/fit/en","quote":"I absolutely love the app.","rating":5,"review_date":"2026-06-23","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.scribd.app.reader0","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (277f678086a6…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.