Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Music won't start and endless loading times”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 3122521988

Proof data

Record hash (SHA-256)

a47ef8547f4480767a67290825fbdc2b083c3813c45f12254a4c615bb934577b

Signature (Ed25519, base64)

weKwQ3MX2ysxNHiVyLI6MVTC6XgnIM4gc9lHlGvAe0j5Z2JKUGlqM9c1WvfSpTiQFlPgIHJs6Yxn0cQMNitwCg==

Merkle root

feb82b7f8aea18b46b248fac49fdc21a6b138fec64dc2fa12c4b3c7a81799706

Merkle path

["a47dfcd8c0c30265a69df0bc0812b367022a498b2ef06227435afa8523e39c3a","60053eb9e2724a92e34760e097c63169d7a175d38bafe3d8668482101ad20a26","d665d590f7503771e4fc13d3ff7f1df8831b1777d6dbe07c72cd476ae7ff6119","c561f19baf1871a979ea64eac325a6f3f7a456a3a46f7f7289a2398e1f1e67f5","735e3736726cdc945fe280fc9c75c9d57412096c453600d756d4236db5c7d766","864599877444231364178bcd9aff53d950db98e0c3392aea2d971138a21451a9","2d26879071412714a989091c4ed6aa9532630154e4136ebf306f502936c549ce","cddd4ea5b2c4726965c0df8d28a035bd23e8bce8db9570f3182f182bea95f3a4","d27918544b965ee209d41be80334cdc64ff95aeca28f4afb3cbec19e5b1ef3c8","1d9d6b7fcaf5d6bb33f2c007a8292d2b44d8fec48097df959b9a849b2337d657","7b10c32f80fb45806bc5795cb4f4f04ebee8690ca5b1eb4157f254d5b995d231","9c57247bd0b6e65c1cbc565b7a243d4c729cd2dfeb13ce6f213335452ea82ac8","bb89617499bce359df1b35a0c05252baf549c720d731f7a552577fc93cc48706","e6a39c1e3a8ee923d6c694e5c8148fd9036767f27173ccfd95c1fa41870eb82d","c63ac18932e0255ab2763f8017dd7d3a8a4963e42e4624815bb352fabc7bb17d"]

Anchored

2026-10-07

Public log entry

search.sigstore.dev, log index 3122521988 · entry 108e9186e8c5677afa72…

Expected log hash

9fa0d177312c5b0b22ba9dc313f3316134d71d179dc19912df4abe4610de68bf The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1791343163559","kind":"published-quote","locale":"en","page":"theme:spotify/delivery/en","quote":"Music won't start and endless loading times","rating":1,"review_date":"2026-09-14","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.spotify.music","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (feb82b7f8aea…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.