Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“I love the lyrics”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
b0d0f70d6e0f83b8f9dc336db59099c423ac9680c687a0c0d90f37da7a642e4e
Signature (Ed25519, base64)
k0xrm5JUjxP1L2BG/PW1zaZy8o1Xc0xP+WNjtTy1fdsdzbMzd3gHqf47VliK2ZYeLTQcP83o3bVb1q4WCETYCQ==
Merkle root
c5671f9a997da9b293a79ebe58b20e4534ae608121169f15a5adc358d42ed147
Merkle path
["b0cb2e86f445d235c30ad024798fe71c523bdde0d456c1c5eee163e9cf64ecc4","944b263fce7e881327b585597b86741f431c6e1c68ef24693fc7231e5abb0bd2","40654b6460a51644e38253e81c4071e0f3cd2e74fe659a207cf7328858bf71c6","a12d088d954a3d4007b106b19838dc68477fb0f64f0f987be35b7a6f9d87259d","0ad09a7509e24de1906656e6f840c83d5151417a008527d8288adfe9b84f9dd4","5998dcee3ca481d41c82e731a18c57591b13abd26c61a505c9a997bf0cbefb32","eb49710c0c8e0c28d52a07575955ba75f217518654f0ba87b0ae859329cb88f3","985771c33a3670214030fb19f9d3f52a96f1efe90298bfd6556812996f86a3ae","33cc62572e117d11ea08d83f27c54d81c4ec3205a202e4d4ce200d13bc6d6afe","a7d5715ab40c1955f715632db67cf842c1e11ebb5c8bd3e8899c70ab72edc1a0","48f32bf1be839517c111f8d3695b25e0bf6b243556dd144c304b32536f258a6c","0e22a8f41f5adefd00c269a92a54d3c7f89dce2a532ca02f7a4743530169d956","388888fccda291caa041510ab350a71f4e5bb952b0c83f6d43c5ee2881af2c2a","8621becbd314bf961e51e6037fd253dfa12e66cb7b2d1c68d51addc52321e8a9","b178a1b83338c84f1a44bf8fe330ca4b62fad9df75daa4f4e38c0d04e336f831"]
Anchored
2026-10-05
Public log entry
search.sigstore.dev, log index 3081733041 · entry 108e9186e8c5677a0bbb…
Expected log hash
88ab7ac46d4614551fa6e665889f054d7592b15d91016a45621b5c46a7ae8e2f The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1791174108170","kind":"published-quote","locale":"en","page":"theme:spotify/delivery/en","quote":"I love the lyrics","rating":5,"review_date":"2026-09-20","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.spotify.music","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (c5671f9a997d…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.