Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Annoying banner demanding notification permissions, can't get rid of it.”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 2913636507

Proof data

Record hash (SHA-256)

79fefb1f6538aa0aca889588e4236210c0a8a93a6f5af310b50a5b81cde1d156

Signature (Ed25519, base64)

3n3a4yvC9gR75eIt68eJwOUF1HcmO/TcnDsqFxi4sZfP7kdeqoQkSCOSY1ov0Z6gSxMVmAz7tDp9VePTuXGVBg==

Merkle root

f26292e960b34f73f9768b4afc64585e265549d794b35b8167826c2bcda92ef5

Merkle path

["79fc41ec15f9716a176d575b91901cb14ef668306034d072ae0a9c76c63fe9d5","bb37ff74ae91b857e1af0926a97a4690f3bfcb51bfbb4836b1ef61b7f72f73e1","bf39f631ed14c998a67981a57390f1b4d392a86238d209d5447ed975c8b759c4","3e174d0c2959e56eea0e2870fd476a755a323beb79db829dd2a8811b8a72db9d","a5b188ff097fd8d519fd26c6c44b785d112df0be45ce954d234b0ce7dff47ef3","ac4da680833a641cce293ab237754aa3ed27655488d41f1d990f9eeaf98357d2","cd31dc4b3e508e0594137f2b0571e4974fee0a9ba6e00023739f62fc9f6acbf8","fde7de9584edee985e57fe4e350bb678195dfedd929e9e29587b7e35d69f28f0","4c0300c6ed46b00024ff3b8da1461ab4e72398907ed76031049d0d941e7ebdd7","8c47652cddf09fb7c4e725e3e94f12a52b338aef25653f7efc7790d7397a19f8","dae7bfd6c108e5c8e6def41305d16045bc4033712b2e981438c95b3e764d0576","9a9aacd96a1ac53199b2b5828545bdd6abac29af29da6dc5f9cc3106d65b75ac","ff839efe243c09faa45172bad7cb61d9b7e0949040c580ec02a160cb61e2c279","7a8821e5f39bd89945ecf080ecd049c93644614124901c8b74f26df2e34d9289","e95e880a53b013b49906f2e6b9dcc652726333d77986f48029bb634dc427e2de"]

Anchored

2026-09-23

Public log entry

search.sigstore.dev, log index 2913636507 · entry 108e9186e8c5677aea51…

Expected log hash

417fac9b806377ff48d30ded01faf8424eb98406df713fe2564ee9077747e6a6 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1790070376053","kind":"published-quote","locale":"en","page":"theme:audioteka/communication/en","quote":"Annoying banner demanding notification permissions, can't get rid of it.","rating":3,"review_date":"2025-08-09","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.audioteka","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (f26292e960b3…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.