Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“super hard to get a refund”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
7fbf35161ea46fb82bef1aeb194ab94159c5ba411a1b71b8823536795a81664f
Signature (Ed25519, base64)
9ubrmyu49ihUszRTLx8EIvyOv6I9e8hmHa90cJtv3z9hUH7lA7+QsqGAO64cEcd5n1F3EpDVnyBymzIVGABABQ==
Merkle root
0148d24ff6e9c2ab4d5b200cf436fcaf811faf144951e67c277e5df63df916ac
Merkle path
["7fbc23ad02df64abbab6ba68580980192640b4c4d0cb3ed2c510b5f5815d3d27","d0e256357587db0db06f8a8479fe687ec2eded8685e802799b8cc3991fe049c8","e8ee55b57a9cc7e2ab914fcd678ce2ffb4d2665f1ebfb534b97ccd34b2b198ee","af6993d9bfab4c5ddfb7debfd5ae62f4f32f303222d74baed9eeed88ed4718a5","8a5f27c63eac546afcb2d349f372473a6b312cb9470ac45017bdae082e8312ed","73ed7ff657296c8c516a4b2fca8d8a8a73439b2b14776dd72d91a4396475b32f","91e24cc104002bfab1e042de0032cd2f0601c1cf0b510bdccc3bcbbf3e3c5dba","ecee3efb6c9a3408c15138afcf91f0acdd55a41ef8f85782df70f8df806ede98","d1b837168d37c2a8995ce59e1d1ec6d73be6ae577e1b80566aaed602c6b21087","ca8265c0907f9cac20ddf04cbfa652d7a25a65c2720e5875bbab940af7bbf420","1d0fca0028518c455afbb6384675bdf33196ed95bee30c7d3396e5f360c8a420","ae1beec5807bbfadbcebc3be08a7b30d1d49614f5aafbe96f25813e6f8c87ed4","dee05a48d41176f0f5ab4381f50b484efefd7f01f056a076c3a3bdcf5efe9e77","921869a075628557d48c5285732233ca6fda8483cd0012c7895889f659ad236c","eefb32e3ef6dc5b176b5121ed7a7991ded7d89d0f08c50d4493143d001bfb6b2"]
Anchored
2026-08-19
Public log entry
search.sigstore.dev, log index 2513934798 · entry 108e9186e8c5677abbfa…
Expected log hash
4398d73a28baccf419c99b11cbeb8ef2e4242701bb0cc17960e1b5f329faf480 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787122088277","kind":"published-quote","locale":"en","page":"theme:acrobat/returns/en","quote":"super hard to get a refund","rating":1,"review_date":"2026-07-19","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.adobe.reader","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (0148d24ff6e9…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.