Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“For several months, I haven't been able to find my items.”
Google Play · 1/5 · 2026-08-12

Checks (re-run on this request)

✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
✓ Public transparency log — Sigstore Rekor log index 2514967984

Proof data

Record hash (SHA-256): 77bf2d46c00f299f6d1d315ea8620e26720f93d7457660a457f31d2c8953995c
Signature (Ed25519, base64): bwIF95/U9COsZLK4CJrpbqTxSi4gNbhgPDjmLfbsZt/fS09ybmozxSDv5O7tPT5akzmo/hoMeS6k5dne3+8ZDg==
Merkle root: 9ddf6b9053b6e5e7a2f15ee7f3bfc8dfb72c48a1917ae5b7e553033e3ded6523
Merkle path: ["77c1da46aa1cbef71c2585431385620ee6d5d8bd687d8db4b41af50f6a80db93","dd987ef3b25aea0da2e72fb70c95ad36a7f70141107ecbb0f59915020edaa173","cbac0caabbf5d2a7962601159b8c07bac0a49382d39d33496bdbfbd3bfcc13e8","48964ea8b4e4243b5e9f5224bdd9b63733cd5f1be70323cb4d25e072b6c3e913","056db62abdee3698c4962eeb4048c96a6a7fbdaf836e48c54b8ed10bb1cc8859","ac5eb52dfd6a9dfbc0147fe6b01407cfa0b033def752e4addc5193bd695af5ea","00670f393ae5495254de7a3fef3d06ce8f3cda68740947f6e57f40db53b7f64f","cff285b4cd76c83eea1f3e7ab9ff8e950bcb356f0c0c35da4f88ae31f63e4af1","b4c9c368806cc12c0238ba91c1c0c35042e66dfb731c14d1997ff8cfe0419494","6d156ebc1149a6d70e02a7178d2db71a9588d43cd6e21a6e6d8e4da3a417717b","e877b281872eb06782d2ec7d80dcbf01b3ef8a29fa9c6db309f58fc7f4b56c77","3dd2b70b6c1d1e7a3388f71414deed87435e67d80bfb29e6fa52cb3fed84f7e8","a21260a3b3feca1d6975bcdc8cefc8114d0a842f3a7e63f8b9f1b1daec35bd2a","ea40ae0189ccbe6f115902554a87d5a76ecff9d4f22c2848cf6df598f3744e11","50c4eca268fbb41f8c6bc36d8a5d1b6cc09733d96f0fb33e6cb584096c56f695"]
Anchored: 2026-08-19
Public log entry: search.sigstore.dev, log index 2514967984 · entry 108e9186e8c5677a902c…
Expected log hash: be0cb34bbab326d10b25013c37c9294b14554a6c6e9fac3dc68c06dc2c3c60e7 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record: {"dataset_version":"v1787135269737","kind":"published-quote","locale":"en","page":"brand:sumup","quote":"For several months, I haven't been able to find my items.","rating":1,"review_date":"2026-08-12","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.kaching.merchant","v":1}

Verify in the public log

Open the Rekor entry (pre-filled with this proof's log index).
In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (9ddf6b9053b6…), which ties this proof's root to the log entry.
Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.