Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“I was charged TWICE for my premium subscription”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 3178600936

Proof data

Record hash (SHA-256)

a820a197b30607452dcb09f00ef5dad2663a43c6ee822679f2ebe919ab876625

Signature (Ed25519, base64)

AyUG0gRk1nidAKiNN6sk/bOr2IENCXVP2trnRCEZmI2etDViV2DB2b585bV9DSKwitxwgUOhyWKMN9BrysgBCA==

Merkle root

eee462924587f8024361bc8d60043805cf5210f8bd2ef7667df06d093552f9e6

Merkle path

["a81e61180759babe26366a3708949afaaa4e7bd46714ae18acd35bb9f860423a","9f5733b6337aa7d335c5d43aded32ede24b154120df93b05651c8a74ec9be7e1","c9ae46dbc1aa0c423071c27bb682b3e9b753f13eac262b0008dda613792d7f42","3fea500853bdcc58f04c80d232054f95e1402bb339db2d306eb4725b18d787e7","4a0148be523728c5c61f5650051bc20f997cfc2281ba54eb694d5a0a6565b4b9","a4f880db9fc79f6dcd257fe976539dd56a616d7c7f07eaafb6b6d5b16de50e7c","dcac61f475d1d8eeadaaec771c914c95fe50aa3af23c7dca5f0775ec83ede861","d6bd2fb036151741d83bc771e4cbf5e59e900a6ca339f4487842687805cc9cba","cf0820d093937f94d4a5ba72dd7fad3bd43ad957b5190484213b5f0296f1dcca","346ffcb571226f6a3c6314c4d3d37a9f3f7c854478edc9256b84e28ead38261a","ff2b48a0e4499fba2f0e6147454654d31d5b9b7e7c59f047300283773bbd3f09","a881ef2a70af757470d8c26ade26209d4a9c636254361ebaffcdf8173cc1209b","7461bc2d06b1d6bef7145de580cb46d87ddc9fa66e098a96698a96372c033f50","f5776b4aea049b369136550a2eba5c5f94aeaa8e5ccb2b2ad336fc6ccf74ea7d","452f4fcbca19997a15e6a6869c50e026ff02cb90a6ef21da106ee0457e55941a"]

Anchored

2026-10-10

Public log entry

search.sigstore.dev, log index 3178600936 · entry 108e9186e8c5677a6a91…

Expected log hash

f3dccf508afcb5e89d56dabc8c5aead85de215b1b896d057d463ea1c1bdb13a3 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1791606586319","kind":"published-quote","locale":"en","page":"brand:spotify","quote":"I was charged TWICE for my premium subscription","rating":1,"review_date":"2026-09-20","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.spotify.music","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (eee462924587…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.