Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“It won't let me open playlists normally.”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
a7cce0bfe06fa677afc0a63a33716e8280011316565bbdc3ffccaa7dfa5c89f0
Signature (Ed25519, base64)
TQQcJwFLVeuPkpQxW/BOhntVLHG+skEqKy7CI9G5iCv1BDXBTzsbofuiaS1I+Q5bV1ZI+foeUXgkmgYsWQUVAw==
Merkle root
afb9ffbb4b4e88017e1c868247f919ebcfe69f09127d391e7daa08019eb2b63b
Merkle path
["a7c7826815e1f8c8efb6536bebb37c59ebae9a5fc972c0b07fea49d11b9c1abf","f0565500348c7c1f43c4e4d54914720337f8b0830dea8cec1d55ae17ab219a11","907b7cfd7954b1f0ff767af7097a8240a5f5efbc45136a556433c73c2493549c","95dee7b943ca6e1e9dc2b1398ac59b48244f1282165088d86907f37f8117bb5a","e5d2ac7de5c1dc34a12a75c3c4bb0cc7e474f7c40c14e329c4094828b98afeea","add2d259f34a6b242b0c74329f3a7e19c9e6d5645c192ad1a72ebd78ecb7d8bc","3dc6b02bad0dc184598315d68babd1ef5b425cae0ef6e782805d8ba0b3034e99","7272a3cd24136b86682cd36f6ba5a38fc9a670bfa8abc85abe1d744b7b680346","051fdc296e48e565b8b8029029908f600353737106a2837333b6f5bbda512c76","a1659b41ae31b6e7cb705d9db0c75ad82151b484bc67ad13714c3ce64c2249bc","fbb9c9a18eac38793b2bbe9f5a8890915f6baef5928b501720ae1ca6a0736581","6143c7455ad967e91f755f8670f5d28a4352605199f021f556e1f5c4f79aabc6","ed385a47750dab9ec64ed7263ee30fb072849b32983406b7ab0d0c13d1cf4dcd","5c5f731502958b375bc1d9a553448dbbddc644c5b57d6bfb1c2392c3f578da0d","72bbc4ee0a973113b1d556f76d02fea2c4704794a0d313a96e49ff7b6174dec2"]
Anchored
2026-10-10
Public log entry
search.sigstore.dev, log index 3178115911 · entry 108e9186e8c5677a2bba…
Expected log hash
a144ffc32dfaa9fe45b4895b7f4c17280667152868dd8de227ca2811c60c870f The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1791604579182","kind":"published-quote","locale":"en","page":"brand:spotify","quote":"It won't let me open playlists normally.","rating":4,"review_date":"2026-09-20","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.spotify.music","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (afb9ffbb4b4e…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.