Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Not an intuitive app, features are hit or miss.”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 3140475820

Proof data

Record hash (SHA-256)

a05d0725c5d29f3f67d6b09251af06a70cc366c9e1da1681e3e71f1ad45c8021

Signature (Ed25519, base64)

tHvkadLwfI9ZepcVDHf8QYlwTeNPg/YMIXefy859cfXxOkVVmtPjYiLKDn+9Ilg679wfwVOgA+PDX8SQt67uCQ==

Merkle root

52d6be1abed15ebd0724a0e1a493d5805e1ea49ddcaf8e9e5584928cd3e4d759

Merkle path

["a05e26ae468ec71e82694d0af97a8fc714e3274a79026c4490cc47305141eba5","4746f314f62d53fd4fe4c24a763e5a8cd92a6bfda7c97d3d37142df2892eff11","20bdaf8248d1b129f240117836818589188dfb812b6f3b6bdb1dbc7a8308d26f","4dbf4e0e439ea81c809f236958924624f886c5a307ce43357942297b67de3eb1","c2ae4589f0961286027ed64f05f3c17131187ee036e80094082e462de6901a2c","f05a229ea42f47fa479779576aa76a3b14ac9ce1df8bf5fff83f809712867f51","4130aed2281a86829ae6037d3b811fc6bb810a11fb0282478a051a2925c2715a","e7a0831b89f398c146a8ec1ea2b9c3d4e25eda5c1c13743361a58757b183a1e8","cd0d82c4c82021778c800e094837aeebf0037a0cc08485f37637ec1d4b8f9d7c","37a46255823f8d60e19673f866e282138006c50cedd736a70babb70d1403dd13","f346844c5eeaf68f02eaf08f291e1a8c316d713d59000253bf10f3ed29a2d486","b4ed973d9a81bec59cc60993fb375b77fb1ccf8e1ee07b38824b8dfc57c9e6b1","791a0e00ba2c4e0abbb082fb7aa9212ebed8a2631a8fff481de7bed24862693e","64b3ccbf7465086dd7db73066d917eee6e4789a39addca1cf1c9d0e38a1ff084","b72fcc24171828b3fdfff6be65bb433d37b8e51a187739d27a216a784d84cf36"]

Anchored

2026-10-08

Public log entry

search.sigstore.dev, log index 3140475820 · entry 108e9186e8c5677a78c2…

Expected log hash

bb68bef30792bf00f645df162a48943f770bc3f026216a44dedb4651c8ac0917 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1791431489246","kind":"published-quote","locale":"en","page":"brand:deezer","quote":"Not an intuitive app, features are hit or miss.","rating":1,"review_date":"2026-09-20","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=deezer.android.app","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (52d6be1abed1…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.