Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“tricked into paying $40”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 2514851395

Proof data

Record hash (SHA-256)

82577bf3a7f5137ab909c61af649d4ca0315a26d9b1a882dc62795fd8627daf7

Signature (Ed25519, base64)

/On+SX13MBORj5y1jevT+T1VwSpQ8E0mpm/ByS+IzNY6ohj9APsbQeVhpoRkAhHJQCenhqX+VtN6cWjSqNGmBw==

Merkle root

b6da35820db152d3d2c0cee337545e3489f0422a146fcc8c60737b1d3a3ef55c

Merkle path

["825886bd424907a253e3f603f51cd08bdca2874370e5ab7b364b430e91940442","48dd5ed754dfdba27e352c531dcfa74d011c1f54ecf8acf10a661857089a06b2","0ad0deb4353842a7b9b29d1c440543d921174f2d12a105da7832cdf67e8ba013","a0e1523fb2c117173288f3b8bf6798673ee58aa9acb84fce1516dfb0d8530de9","0473b76f9b9bd6d020265767786c187bcb0935fad1e9c7ed2d6f92ad0915d253","5f10913bb6446591e2166b4add249098d2c6e1d6fb01d2fb47a7fbc1e3af4f21","9246d47fa32d22871e450ba9bab9b4f8e46fb0d1fc4b673d10a88a09728fde6a","adf470665760cae968376fe1ee5fe1f9313b153b886d1717201ee8d899a8690c","f0fda64495adf6a9a194e465945bf4f76515412ef1450fe7da72301f1b26a450","29e2514429e5a4e0845292a9f4790e90d52c95c18157a6e8afcf7cb86710ad1b","35ce20fd4381a317d38630ce56b2cfaeb567178cd2d697da742848049810bf60","758537e2bcac3ef609f10f8e1db2b39182f5feac80a9b2cb9ea6e42a7fb99228","7683d5d7c88ecec7a3b1a5734816ef1b47ef9cb2b169a45f71d75a399897983a","a87bd939a3ad0796a8d580dacb2c37af7f713a77a0e4e7ca6c95f21a1e1d62cf","c54d917d90cf6041da53ed8de4347323c6a7de99e787dde7349330851a57a3d5"]

Anchored

2026-08-19

Public log entry

search.sigstore.dev, log index 2514851395 · entry 108e9186e8c5677a4f62…

Expected log hash

687a04ce8b1c63a953fd353f279012a3ef08c4ad12d885582b1b6ee85d05b900 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1787134378129","kind":"published-quote","locale":"en","page":"theme:xodo/billing/en","quote":"tricked into paying $40","rating":1,"review_date":"2026-04-09","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.xodo.pdf.reader","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (b6da35820db1…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.