Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“I cancelled it the day of but apparently it did not go through”
Google Play · 1/5 · 2026-08-08

Checks (re-run on this request)

✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
✓ Public transparency log — Sigstore Rekor log index 2514750008

Proof data

Record hash (SHA-256): 7c3786f60445d397483658f4cf52bc2ac5e0cdb072304e5dfa99a79ab26a5eab
Signature (Ed25519, base64): xDxHtjurWdrFK7NtqgnHteM3N9wuzmE5Q9+HDsHdyjKKqo4RjKP8i5u34cRYtA5lwnOmPQtBmuj1Q366H7heCQ==
Merkle root: 1f4f3b5edaf264bc6a00193653378e6f11cdf7d052ca5b778d915c1c21c7403d
Merkle path: ["7c23a7c1ff40f0f2f031a2bb969c72b2ff8bed1ab3fabd5de4561109b054eb73","2cc77e212a309241c894c633921bd62c36041a31ef7decd2ce2adb6d6e1f9d6a","b6bf8312aeca19eb0767d860f8afa5148461cf9545905782359c0d974c493e68","de92c33234d26323225c12a0e93e06e23547bdce60e88f01a56a87a41bdfe9d5","aad333dbc13b32471f1cd78dbc1b75ad95777e74d1ae34461cc1e789cfe6e49a","3df888749eed6fb9b105c9d5f5801f3fd8d771c1660885a13a6e106ca0550af1","4fc01e48b7d6446044623eeb1abf2a964e406bc4c374e33bb9d75540c3b5982d","e3e1d9c48825e0e8bf32eb16dd50c569e6ee675cd505f79808fa27249c83350a","367ea31c39879b7d370a6d195c2a720f2a46ddf0c482766a513d89e6d4240568","eec1db807fd635444c6441bf36ee441f62a2504e2b41be95cc853d6fddbf299b","fe60d475631ac81456d4aadd5ceabc80691e84611164100c97393a799e851c9c","eb0a6a4c2cf5e47f181a889197ee388faa509c27825a272b34062cfb17e38ef1","262a9f81238583e2cd1857070930778ca81e80099af74b7a470c955d877ca1b0","fc5a80f8a33a91194ac04bb68228972904c735c88173cb742b33f0dc7c73d75a","354ad39e35fba32f932ca084b3a174e4cb81b7aabf68001f138a9a4088e307bc"]
Anchored: 2026-08-19
Public log entry: search.sigstore.dev, log index 2514750008 · entry 108e9186e8c5677a7ac2…
Expected log hash: 72d3f466bc589a4186e04430bc1133fbed10c2c1049384c2fe15c1cad3406981 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record: {"dataset_version":"v1787133679631","kind":"published-quote","locale":"en","page":"theme:acrobat/billing/en","quote":"I cancelled it the day of but apparently it did not go through","rating":1,"review_date":"2026-08-08","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.adobe.reader","v":1}

Verify in the public log

Open the Rekor entry (pre-filled with this proof's log index).
In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (1f4f3b5edaf2…), which ties this proof's root to the log entry.
Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.