Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“it's a well-known app with countless kinds of music to listen to”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
ac19f0a41219d981e764e05fb29eb619146deb8919e62622589516a1cc851f40
Signature (Ed25519, base64)
bzLJvUgof2AALORT+f2a/vd4PlAQ4qNMl1owfwuiBNIIPK4d/be/VHjpfRiniAD111BP7g3GTu1ow1GVyj9CCw==
Merkle root
c954f278b03f0ddfeb806da3192a945ea74ae5ace31cdf4f5c03d62f9b9c9c85
Merkle path
["ac1a62d1330e74562826c4149a07bacb1e6b3444539fb171f3768f86524c5913","e72543e549bf26df4a3107f151620cf0e35d63f806739b9b48e9bcc716aa6c82","44f59a53e6748f93c61bdd88100a2a24849db749814058f808c84da23654fe9e","cfe19e7a91dedd7f9901a517dcac4128bc5dbb2a477d5c598bf03ccccf3a1fdf","6d471e1d6f4de47a9805b49570007269ae07645575dbfd2742544d6dcb3f920d","2f4bfa9c5b5b7aebdc51d56822a0315879015d7fdfbf4e620d7af73e931dc771","0090710e5569490750e40d2ff3822dcbd72f2cab5023395e6c421d5cb27eda50","61a390de3284e827e785c56f9df7b41e21f453316b776a1fccc1fa4835e1a7bc","3ecbe23f0f382dd6bd777462379f7ff330a2b4eebf2ae56354c82c310edc9c2f","2c8d9150dcb3b89ef84288f6de2267ae44860b29ba0c1471c301033792879b4a","f216407b2d89039a38455b48115dfeed046ef0293f2f2d358637e454bee40d4f","8f2a8912aca1048a4933283d89c19d6743fc8e8e17d93a0587b33eba88abd667","b611596563f9f58647a46a10388967b912d7f9bc715dab82189c067238c26228","df51e36b3706cf0aa826d42298e6b3dec441c2522060e389a8510db32e8f4a39","d08e876184fd6f67c869a98f4654f693085707c7f9c1884596981ce250200aaf"]
Anchored
2026-10-05
Public log entry
search.sigstore.dev, log index 3084008230 · entry 108e9186e8c5677aea31…
Expected log hash
6a8c2df90f09571413991731949dc32a09a60f9a75e1342827498da2cbeccca4 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1791183579482","kind":"published-quote","locale":"en","page":"theme:spotify/delivery/en","quote":"it's a well-known app with countless kinds of music to listen to","rating":4,"review_date":"2026-09-19","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.spotify.music","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (c954f278b03f…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.