Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“I only took the free trial and cancelled instantly after”
Google Play · 1/5 · 2026-03-01

Checks (re-run on this request)

✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
✓ Public transparency log — Sigstore Rekor log index 2543025731

Proof data

Record hash (SHA-256): 795efe8d47a01f7991d73d64463e5b99b703317970a19ccfa4458e481bf892a8
Signature (Ed25519, base64): MyVH7c8kNqd6hcUnmL/7KavYee7HGGpoBkkD9tlCTews7Lfg2j8qHlPDodYXCeHqKa69jvKIr9WyYcL698dBDw==
Merkle root: 172a3e0b3c9f8b02f52318e01ba6beb899404e00e91c15eebc4dea38467e1404
Merkle path: ["7967197562d438a7a3dfe987982e27a09023c314a6b0a5325a6b118a554b8d2a","9ca97cc8ab92aad23091c7c336f43ccf48ccc6e1facf2067c852a77188c7002b","8631978d826bc9b5765c8a9b9d2dd626fa714a7de0355a81fda1be72aa23b6b5","16ff106f385e6a102fe11e4f3e7858816a5fae6a9f1d9a54fe6757140e30fbcf","fe8f5f4f5aeecd00864881c39d2819873b3811c468f7e603c4024b535da13a79","cc7eb7358c84d0416832decfa07826253e269a05b8d0cd8ce144e4713b827ab4","9da0847122cee7320319e4f4c24022cb1d5c62345c150975df51a20735e511ce","f1dc25787d967b30056d18dd5cad48cc72095292ef45d3caaddf3e9fe6052597","1c414db941be58c662828eda50fd398787fb1b494373b042849dd23b9e2bd15d","461bba575a215008d6ffd77493d70cc2cccc5ddabce5962668f2b3c8a1f61732","057312bf19bec52eca79696833e9284ad3e97909571c00140a1555d6764df41d","1f567a3fb36c78ae362612f4c99cae95ae4dd4ad0c6c633328b659341fcb6d94","f12a899e5c92b32cfe903fadd591410ed4da016670fe0a40b993afb550e2e37a","cf4d3887edb33be9d7a9e64011338d9abc8444e06d1f5332550f7686a2c1727d","7731d0ded4f51d151ea3e84474d1e27a6279e8756420c93cf5fec0abf7f11add"]
Anchored: 2026-08-21
Public log entry: search.sigstore.dev, log index 2543025731 · entry 108e9186e8c5677a8971…
Expected log hash: 19ecbe4a66d8adbd7c6057dbf6ed9be73485c248dba1e0c595279a908b3e8bea The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record: {"dataset_version":"v1787283443958","kind":"published-quote","locale":"en","page":"theme:storytel/billing/en","quote":"I only took the free trial and cancelled instantly after","rating":1,"review_date":"2026-03-01","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=grit.storytel.app","v":1}

Verify in the public log

Open the Rekor entry (pre-filled with this proof's log index).
In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (172a3e0b3c9f…), which ties this proof's root to the log entry.
Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.