Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“spending hours a day to find when I finish listening”
Google Play · 3/5 · 2026-05-10

Checks (re-run on this request)

✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
✓ Public transparency log — Sigstore Rekor log index 2542751096

Proof data

Record hash (SHA-256): a6bb55c7c5391fc93cd8c5d6f168ada50453701982a77a769915fe87d2ae363c
Signature (Ed25519, base64): u6LwHf9k8I+6evutQL0VkFOmImQ3IC2NOdWWqmnvq2PT+LjEex6G57Cax++24HAbBv+jPyN7Naw+2GUaUL3JAg==
Merkle root: cc9af896bdf0beb88857e1dcc841c404ccd4c59cbcb6932f17077fc8aa87fc23
Merkle path: ["a6b81754f683e6f372c3904b6d7576db1aac118414f6e08021c2154104f921a1","c5b15da15a2fde1ea05fdd272323fd8c2c6426f3eb8227edd7baa1e4c9264123","2f2fa4c48555bffc19c0ba211ef0bca6a5c255f8248a74bce0c289a2e8aa63d3","ea6ece51a2a7e331be2e9767bdf603184982b7fe4536c520d4ac0b023cc79e3e","24fd5e3fe29a08dd6a12b146bf6a61e36948a32c0f94495b46eed7f6d13e3c26","23ea1229cc2d0ba5a59d22d6107913e55f7b2a4cf7b526526575be4c4ec43fc8","0a952a853f3a4c1ca84b30a277da00a626e2c981a66f0bfd7ecc5d35d9249c0c","6bdde0e093af2d0df454301415ba8639ae2e0136e618797ac15627c8e3a5b65c","3ec85ca49d1c1cec2c04f65c0e123e2c3ab2cbb7133ce98a232044fdacf2b01e","b6891fba91c16f8e28e3cb9cc2b0698a3ac18320cea421b7a871355bd5f8b764","3a4109395b9149f1c6bfc996e9f44859e3320b99a71f5efacd5a311c8e002c0b","db6ffa03f63fa74be08e47d28baa019074214aafd37cdaea119f92339e5c8ab7","28138d16b82858a851e9b6a3c2d387e915098e2a791c7c1438b97eadff6ef530","c7065531c3e7c4c7309e4efe4674330d1f0c5150d728171b8966a352ede62d5a","7e6c62c2991c7cac05134c9f9e2ab89c75f6106f706f524eb2e9fa9f554216f5"]
Anchored: 2026-08-21
Public log entry: search.sigstore.dev, log index 2542751096 · entry 108e9186e8c5677aaab3…
Expected log hash: 8251ea19feed4cbe325f48ba93f0e47294878633f5d43178e4a3a023547e795b The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record: {"dataset_version":"v1787281943761","kind":"published-quote","locale":"de","page":"theme:storytel/durability/de","quote":"spending hours a day to find when I finish listening","rating":3,"review_date":"2026-05-10","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=grit.storytel.app","v":1}

Verify in the public log

Open the Rekor entry (pre-filled with this proof's log index).
In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (cc9af896bdf0…), which ties this proof's root to the log entry.
Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.