Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“I've been using it for 5 years.”
Google Play · 5/5 · 2026-08-04

Checks (re-run on this request)

✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
✓ Public transparency log — Sigstore Rekor log index 2515345787

Proof data

Record hash (SHA-256): 810ab67f446a874d153f80252378d4bd6ae53412ac3051ca09fe55a0c11a9001
Signature (Ed25519, base64): EgFlGCXTbzPFFUjTn47+QrznVxyX8HF5fAyPCdPKOEIJ2hIkyROpWzvdu407bxxuUdfdoxjbQPt9+YWKUqNADw==
Merkle root: e61c2598d4d03770603e24740bcc427581e87bcbeea2e56dc34fd81a9f496465
Merkle path: ["81077fea4cd439c3495567463448cf40717c7cf9dc8d019c6c4b859acc239679","48a82e1c838730a59d566a43866da9719ce6cbc639c37ca2192c4ad71c673a28","a35f7cc5a8519447703adbf72036a57d1253bc637a07d36496ee114b4bdbcce0","a213ce259f81b56b5ee5db295896033b498e0069b7c148d068a38688d694e938","4381c1d3b5956b48593a7e12a2e5157d92aded4d1582cd324fbcfef27a35e806","c309d8d6f2e0e6d77b1e75c66db3ba86c03701f1a4f7ef35b087adb6acf3a057","426b7a283e1a6084940ee582df56e5567039f11c5f3572abdb4bb6919bc88504","1fe5eff0bb25fd168e27a97c6741e294e367abfe2989147bbf8ffd6b3dc3975c","81c2f5203a6e34f0edb5e39296e8f4b393d8f6a38377869b426df6bcaaa7a6de","7fea5b137e56e33cd8bf2e1b6db4ac48a3668c604c1e75e2ec0f1a0ed9858465","8ee7032db4fdcf5b5226ce1f8cb9a0c745968d6a4a5911747fe90464bc964504","db7172ce14e794d11e5f11fe11ac06253cffac3c662e17e925db59b4efa0b12f","7f1d0c445bb13ae8c90e977abd9f4b017f1736dd8a0b6837e8297de8e292d186","f1950e4af29dd22cc94bc58ead6e376c41b02edc9ab0ebaff7fa6fa0f9bd3732","11a62e67a9d98d919358ca5b8855f911ccdc865f14b203213de31adc67657443"]
Anchored: 2026-08-19
Public log entry: search.sigstore.dev, log index 2515345787 · entry 108e9186e8c5677a749c…
Expected log hash: d9a90b5e7311041bf4315991ca7f2fbceee461daa2ae70a8b8b95323461a31cd The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record: {"dataset_version":"v1787140356347","kind":"published-quote","locale":"en","page":"theme:audible/durability/en","quote":"I've been using it for 5 years.","rating":5,"review_date":"2026-08-04","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.audible.application","v":1}

Verify in the public log

Open the Rekor entry (pre-filled with this proof's log index).
In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (e61c2598d4d0…), which ties this proof's root to the log entry.
Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.