Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“You don't get to keep the books you bought if you cancel.”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
9090163d27b16bc3b6da2848af1ae85dace3f68ad28faa469ca027673e29b92d
Signature (Ed25519, base64)
Ajn3c7aKn4sfEQ2gBBTixdVYDvrKKBAgvweRZL9kfqSw/E+VKAqAiM4XYBYLhov8ReKre9YzR2BY3ZKdQPxKAg==
Merkle root
9d32c0cbfb02966e7a561566f948b48040888a6535c058e814428126106ff945
Merkle path
["908ffa767d84dbfcf102f48d5a24a5d4c8c039604a0468a458a3ee0960bbd241","553d1d3aa7b59e090ed335beb271a1353d1a0f12c42864a495d2dc8525aaca92","7d18b80d31e561a7188ce6e62155334ef004a456386cbb925631867783972ca3","20eb1472fd3fb44a2d2039d310ff96e4dcecf00ff58b764a837b415ed14c3058","139ea4958a74d8442fef9e3777933ef30cbf1a7ecc4335cfcdaeccc91625db1d","ce82eea860f281e4d696a045efe76afe214d1fd03106de69c89c97df35f40619","bf935ee8a55aabdb8bbb43608a785445a736a2a8b11935aa0a99f4f11e34a34b","dadc7e23bfa8a10f1ef95763ab5a725a20c7ae1a09c1a09c50709eb823207f19","f8869e1e69c7da1e518c6afc567bd356a421a5efee620501725b6c5cd8de1339","542620487236f52edf1f780bc35087802e381149a0cc94674a754fb5847d3545","7fe02507622ce65245249a9a4271064b48d46085aad8f7b46a1c25138faaeae6","6d541edb33c9f5f1ee15fbb1fec161013911242830bc1e7512ad7e4c9bac785f","78676505a7a4e31eeadca3cd52e7c8dd54cff3cf24b51dd75865ba23f402c848","07b2decfe383429cb71278f9069f54d1b4f607f991c518b70357c1681514c3ad","a892fc29bb3c992428927e47e35596c876cca06d89acb4ca102f2a534ba3ab13"]
Anchored
2026-10-07
Public log entry
search.sigstore.dev, log index 3121837738 · entry 108e9186e8c5677a0c6c…
Expected log hash
a0090149b27e60cea52dd7dc5f0abf6dd7c00feef65be2874742fff2aa9e8bad The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1791340487550","kind":"published-quote","locale":"en","page":"theme:everand/returns/en","quote":"You don't get to keep the books you bought if you cancel.","rating":2,"review_date":"2026-09-14","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.scribd.app.reader0","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (9d32c0cbfb02…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.