Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“I have been using it since last year”
Google Play · 5/5 · 2025-07-10

Checks (re-run on this request)

✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
✓ Public transparency log — Sigstore Rekor log index 2904877428

Proof data

Record hash (SHA-256): 820f7cac41c8b2c2b3e33aca03648dff8917f8c77887fc33a4e078185d22ff4c
Signature (Ed25519, base64): 0tdOf4g9KIY7c5q0zSZ3R2RbGVcRLH85/2hggLYFDGfqgNdG69G/sonEhm6dl0YsOY/nDOq/1pBESFh+RxAvBA==
Merkle root: e299bf38720a5a91bdf63bbc0205245bccdf3432ab1652c69342549658b7a9ef
Merkle path: ["820f128cdeac94363ad61ad48b8a7fbc3f018c8e69e1bd732f3ed7f5d9167e19","af1acfa458b224cbc601aca9e540ad5074fbc808d8eee168a2b66bfe86b6e3c3","ad8b444c95c38b291df72a943b756a31071c7ef2c137a06272667dd834cc8007","408d088ffe8266533ceec20a6173e40ebfd059904b35ce040b2dd11edcf304fa","d67c80d65a4846e7720186e1944a5be40810e5f8de37ac07bfa90ff764d73409","324638cd0be1b7dbc8c4eeb1d2cf86c21c47b62a5c877969ded4d69d105abaa8","26aae9f5f4e822dea9460d6e7bf55a1b36bb1b60d47fb2d2afb76a355759c206","61e75e74d2b950e25178af7da4229e8ae919d3160d4aebfb5d5da94a090aeda6","da3bef80688e0cc166197ef825887dc55dad176fecb1e2ccb2a67d7ef4080e64","b81d7415838f2fc8572a4ae26569a8af098d67b9bb2a406a58e6042997f89d12","709dc8ac2ae9c9d695d9b1a159880404b1d4e87468bb02df486856103d0e19f3","9c56efa7498f22733bd81d9e1a9aa96f7fa30f782f3e2c5dc658ff683f136fda","3fdd31064998e61048d534909957bf68a4f9bbe35571f6d185756d8acc2a5420","aa4bbeb87247c2797626ab02a549451da6dfce4dcb854a36fdcc601e3e788772","bce5d442c07de6307e5ea8947098e74ce88c2246eda5e5fc1015a6d7519228a8"]
Anchored: 2026-09-21
Public log entry: search.sigstore.dev, log index 2904877428 · entry 108e9186e8c5677ab408…
Expected log hash: d020708737f55ccdf49203f373fcbcefe8158cc388605556fbfda3c365de7360 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record: {"dataset_version":"v1789881486272","kind":"published-quote","locale":"en","page":"theme:vaia/durability/en","quote":"I have been using it since last year","rating":5,"review_date":"2025-07-10","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.studysmarter","v":1}

Verify in the public log

Open the Rekor entry (pre-filled with this proof's log index).
In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (e299bf38720a…), which ties this proof's root to the log entry.
Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.