Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“it's you search song easily”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
90c070dfb6db6efbcad7a355cc517baae2f14f3c62bb8cc235004c09ecc0699a
Signature (Ed25519, base64)
NBnUJVD2u6+Mv89LQ4dxh7SmDw1o2J6Qxr3IAt0OhLKFaQ9s4oFoYwbr9qYiBh5hacIa7VsSpl/+K7afY6OLDw==
Merkle root
784ff8fc3c42eac43c7d399f0d67bba55d28073a7e106789ae0c6c3f5ac9dcc8
Merkle path
["90c02b73d63506ec831bb098faf69d857fa0105b46d009d35b1020c3f3a54359","ee0f4298c248462d1d1286634e8968efdccda8c4a14f506f31691d0c6d375f73","be71690994287996ad40e740282cc6c64821c6f5fec04e5fa524d19a7ed5b899","6af1e6c69239e2ccdd3efbe7d4cf4b7b13f50eedd875e4c0ebf91a0f8a4070d4","274f05de29ac66ba611be3006f48adf0bd3d962bca6399cc8e858768e820094a","0ee3b02795f8c843b69dca615a66d5d91859c3a46330f0a0d08b9042c3dd36ee","0a979848e02b924c8aea2f6a0a3032bb684c1d8d0b9703dd76421939d838e683","811b129209be57c137bd271e10b36a49f3de07568bb34dc726688c5e0e569e3f","7c8ad9d069be21994584326c2da786053cbcd5822e09fd0bd73ab6effa26b257","7f198ff58e037820d3ac4efaf9c7ece0b9cfbaf9ac97fad001eff21c29567ea0","91386c95ee0f1b5506ac5a51064a524e2d9a77e4c6bdc2ef064c6879e4bcb402","134cf62fa4457be90fad52ade3693090dc3bbf86989804f0dd255432e5eaf7ff","76d400188c58a939fb5674b0c9b84ba0bb8d5bb91a670efe6d7087f7cfcad90b","c0acf811319c30afcbe8b77293e97c6cc46544f39bfd9b01931c88a06aefa19f","5fa09e3847513934bffaf71960ac2a100e20422698698ab1e19a4fe8ac133514"]
Anchored
2026-10-09
Public log entry
search.sigstore.dev, log index 3163352270 · entry 108e9186e8c5677ad020…
Expected log hash
a3ae0badac804d14d314abd0e71726d06a96c43a3840dc1d63acded9268c461e The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1791543790412","kind":"published-quote","locale":"de","page":"brand:spotify","quote":"it's you search song easily","rating":4,"review_date":"2026-09-20","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.spotify.music","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (784ff8fc3c42…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.