Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“still quite a large library”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
ab6069ffa71bedeee727e792ea335537619531bc0aeeb8a99f8350f09f2a7ca6
Signature (Ed25519, base64)
H0eGfb1B2S3T6Or/xYtjyI4dn05Z1EOFDVhc5zamov47TCrUBFpxPsKl47HY8yJt2VBKNc3E9Iap8GTAaD2NDg==
Merkle root
3b820b0e91b2475ca02a79fe65f1dcaac35af570ee21f4c868099b9c17e17c1f
Merkle path
["ab6db2ef09ee5fd69c9cd0f5718e8a2305e9d6de4e95a2d9338179f0a34109b2","603f86170d549c31db1456e141cdd697b729991b9691f9e318c6fe62f838aff4","122ddc038f30c8096694e9cb843e2232a18319b39b7266dba3f2234582e9d3d2","57e6926b830cb1b44ea8cb0826ce0c9ffa5ee94f8837d9f99fcadc48e34f3904","ea57a388a8161e54e5e1c3b8e28cc324a8b326cb72bf02ed57be613cef8b013b","73e46c3c00188f7bb516e3a7b5366daf199800aaab352c6b67c98abd1defe867","cefe4f2c7610aeee738271b61066aa1622c15ca18fa40bf860993682290fbc80","9941c86cc796f3591c5674cf54bff4881000220ff9e941159b19f114567a2ca6","378953e4f0817e6996f56c26ae7895d742b0a5faadb3a0f3e49b2e1a3868df91","9879a780b34ab22f21eadbc340270c5a19f09f40aac1cfcf7c5438995e212531","28ffefb2244b18b2060ebfd51ab22f4a8a1bad9792484efed3f16ec28b14c57f","2bf1b458738469a40c92ac31b9aa588bfb71aec0ab8fce1bd7c62a72390ec53a","83db60ef01b99a503ccd6a6abdd52daa1b692b73cf5b978606f8d217f799000c","00a544d427d2b0ef6286f24c44cfcf3a5f82bad04bf6442e459c003cb18785c1","10553711bf6721bc3fa0f227ed3bf669673b7af202d9c22d19db8987b7ed8714"]
Anchored
2026-10-07
Public log entry
search.sigstore.dev, log index 3124210377 · entry 108e9186e8c5677a0172…
Expected log hash
20a5241ced0c7b94303a7b8002f1aae217df3f1371aea54ff5745a148bddda47 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1791349684588","kind":"published-quote","locale":"en","page":"theme:everand/delivery/en","quote":"still quite a large library","rating":4,"review_date":"2026-08-06","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.scribd.app.reader0","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (3b820b0e91b2…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.