Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“I chose deleted the datas and uninstall the app. Wasted 1 hour.”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 2525430207

Proof data

Record hash (SHA-256)

a9831f65f78657800ec1a3a8305dea9bb6111249602c0ff5635917c21cbbfc13

Signature (Ed25519, base64)

xhMO99cUG3aXA/RmFbOMJxuqhgcZJH/kjQpTjmxuPkSLMlRWIAp0J/foiLRjq7baamkZbZcy201c7IoSVe43BA==

Merkle root

689da4f5bb049dceb797a1ebd18ec1f343afdc6a2eec17587eed167cc7c21a02

Merkle path

["a98652adbc17f5867e8833049afaeef3ed88f6981f917fd78a92de84f0038a70","b2d77feaaa3d55cafdfdd99250026ccfee9497d24361bbe95d37088d7b49b763","4d95daa12eb1543ccc1a10f2445cf822455334989de26e1425d479384fadd541","c5a8d4bac01ce1e90e75b5b89aac3a74e1f3064aa0d5ae68024473b4cabbe5ed","ba108a9b178a3048526da60bbb937787a897d5e60dece7ad6bbfd80208c0b841","6c82b0da76ada74e317a6483246451d3b3fd853b427814026d1c6527c7f868e1","0329ae43416e1303ab4488cf2962bba462345d0e0676108eba96933875f80910","a1e520ebe79285005a97e972f16ea6d8497cfe267dfacaa399d16ccd8d396c02","3a1e508552fa70e75d9d2f318da7c8a1808aa34e0e3918da68b37de9d6375a0e","b51d7371fde238880528adc8d312d9d9dfd4952b6489bff94e530dd35b1ea06b","ff2c273ccc874c3bdb3bb95e4e869f64eef3d1c23cc4ddca5e10d2e4b18d8dd6","2201ede7ec211aa6d3c36c2058da1921610788f4f2c1659e5390f2dab6a4939f","a8e81c9c4be1ce6a1aa5a4719319676786621cb7b2766e1f6a09f45dc1bd8c8f","f868ce2794bd46d50ad026b012c7d42f09aeedca360fe9248ca59ded31015a27","2492d624e607c70378839deb70fe4bc4c618faa9a11f2be7d0e42b467b07d755"]

Anchored

2026-08-20

Public log entry

search.sigstore.dev, log index 2525430207 · entry 108e9186e8c5677abb21…

Expected log hash

68e6afcd6c232c11ffffa818a4cc0c5faf1a86dd24e2ab2a7811fa1f4f43bec8 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1787196781193","kind":"published-quote","locale":"de","page":"theme:acrobat/returns/de","quote":"I chose deleted the datas and uninstall the app. Wasted 1 hour.","rating":1,"review_date":"2025-11-29","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.adobe.reader","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (689da4f5bb04…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.