Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“i paid for subscription for a full year to access all features”
Google Play · 2/5 · 2026-08-12

Checks (re-run on this request)

✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
✓ Public transparency log — Sigstore Rekor log index 2515243153

Proof data

Record hash (SHA-256): 78b60db036da3ee7066f915289bafca198297c5eebf55b2ec0c56c346a5069e1
Signature (Ed25519, base64): g0Zegiq3m/9JYHe/ksmEA3HVopVJhprxYCU3M+4FQ6Qd0DSrVi5a162V2HjxxTvR5J64kjucDxsNMOM2JwZeAA==
Merkle root: 30b81ce96f52ff8c37a1dce6a2cf1045c2f51663c1ddbd5ca071d040e32c05d6
Merkle path: ["78b7d3e6dfa46df8c33fb3436bffe85d2b84a595cc85687b1938b6b638e99f15","c99387bccf50802193dc9634b242c192bc2f7f354e1363351356edaf29ad59ef","61e80c0b984a9798f9c06daf55ba0e1e4098ac357de91ad439e5e44662238c56","891f59bfbd6be7186517695a4606521e1c4ef805dd80e30e17379c482200f517","244cb4f652f04cde0a889492955365686eb5ce50c34cb3a1e5a47afb4be6481f","aca9de45496e8dcd777e2442d15eb0a70ff1f9e0162cf3a4c7ce7af5bcf29b2c","9233faaee63dc826877a81c888ea0297f9f7e5203951aa5177e0c8df0d4b0408","8f83cf84c6c5a3b235fafa60e5ebe33a6f02669292fdb2e0f6780fcf0bc0e930","142fab4cee061e59ee70637b8ca07975766634765b66ee295098e47970dbb98b","ee40ec16ab5242a9f5a312479feb02dd3824d4067ba692d743c6a19f682b50b0","0b89138ed4561a66410079dfb0dc2aecd27a87bba165207ef1134d2212325f30","0872621d16210dafd55ebc910beb30ac16999c23b17abbae8f9cebf9760862c1","0afb56aa9b1dab269e4d7e686a093b4dffdbb488bafce3fcc9dbafc5813d2f51","7b80345d7bd213081fa8cbef47938ae80dfc899b90d35aad15f2a6c5e9b16063","dd9b0a9d584b044c4116e1c10c4b8cf4a06383a771a07c9f3d39f998f23cf36d"]
Anchored: 2026-08-19
Public log entry: search.sigstore.dev, log index 2515243153 · entry 108e9186e8c5677a8eb5…
Expected log hash: 314ca716b1ad71ca29fff6da960e81a719fe30fa5fc14d8646acca79a7c09353 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record: {"dataset_version":"v1787138594002","kind":"published-quote","locale":"en","page":"theme:acrobat/billing/en","quote":"i paid for subscription for a full year to access all features","rating":2,"review_date":"2026-08-12","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.adobe.reader","v":1}

Verify in the public log

Open the Rekor entry (pre-filled with this proof's log index).
In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (30b81ce96f52…), which ties this proof's root to the log entry.
Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.