Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“I've sent an email”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
854dbb1b03fdccf98f21c12a5cd3fa82e855483d808575c5edce3d30588cb1c8
Signature (Ed25519, base64)
KPP8cqXdfKudQQ+iRUmUBE1jRB8eFtPuSWPnY+J8d3891Fdm71xY7mtEygExhnJ55jCuhwuoanTujYIffJ/zBg==
Merkle root
2030d4ef17fc68fad1320305cf569e85a00baea931fba0d3ebe628cf9c90c35f
Merkle path
["855505149dd7ca92726e8af3c7c361bcdd19bdaab96d69fc8125b2cc2d187e40","1fd6f3af8a5c40b7af2ff1a3000ca3de620bd72d1dd24d6e376903342de664e6","78df37c4cf383a38b3c46d39650085800775b52aec7378934a20e30945da798a","d14014ab625de24fb8e9c5e0ef45b5e8e48413d63cb9f69576c771c359480c32","5b567f9134cadfd52cc7f2aa78d05c8edbfdcf8ba7802789588b7dd88d67965e","bdaad44b4693b79ecdd00fdd02fdf39d7e4db9e7c04ed846a0f0b979a1e83d2a","4e61977b057b93e78b06d57392b17a20a3f3df71f74722c09490881125829f0b","3631abc0402f74d0e35d30303e0b75589ef8f6a6ab772c9c32bd1a5132fd9d17","5e33b8558a579df78aecefba3e1d02b9911871480fababf88d32331149529aab","c9af134ae6db4f168a0c38a567bdd9e5d9f5fbde1d31aaf7f5f7586e11fe47ba","9f67eb1074b91990e54606cd3672edbbe2facfe6d710aa6519daea754519fdd1","2ac6776e7123b51efbdc9029757d26f53dd2d9b88ed7d8d7316659db8281bcdd","5e71e1e70b37a69afdfa58b6c1794925a5ef525370674594f74ea1403dc0aaab","22c95139cfdc78a2baa7a8e247bcf81329645beab990fc5e095abcbd46515e64","e362b663c2c1f5a93380a04a7aa41b42f4bafc7f870e85cf63803f76c744c486"]
Anchored
2026-08-19
Public log entry
search.sigstore.dev, log index 2514654467 · entry 108e9186e8c5677a9253…
Expected log hash
ddd8d6dfa3771a4106292f7bec674337dc9649465b28b118bb17bfc2b8ff0a67 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787132872903","kind":"published-quote","locale":"en","page":"theme:storytel/communication/en","quote":"I've sent an email","rating":1,"review_date":"2026-06-06","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=grit.storytel.app","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (2030d4ef17fc…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.