Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“It's crazy to have a paid service that is so ineffective.”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 3140838741

Proof data

Record hash (SHA-256)

b165282b93b732dc7885d21f297d74eb2002c365d32b79d51f76a6f0e3a535fc

Signature (Ed25519, base64)

HRvbgi5npSZrWArmDODgFIVG0EH2nmjl2GtPRjvkqDGIr8F8cydDTvHKanN0NzwRtetRj96b+f4aGuPa35qWAw==

Merkle root

68ee5f8618d9ce1aa33f2cb5b6f3145b5f909a3c35a03ccc3d10e979b2f81082

Merkle path

["b164b9d83ea28a6d3051a11159a57536aae0128a82dcf5dfa14ab6d91852a565","a80ff25c47fa317e521bbba26e1d094580c9d57d9e9f7c5f8ac7e8f89fcfb32b","8957d1647c78e9bacc94b2f10925d237792055b53134d1b9ffa93c66bff674f5","3536506514c88b4823b0457dc61cee04fdc8a97dae6e7df4017fe17dc856ed4c","2d2ba1d3188f03e43feb07428c2d2d480e22ba29591f51440de63c857d0ff91a","41e46c9c4cc0bcfebac875b8ae11b0a52a0e6d7627f06444f9c8a3cd013c7d12","6ecb1c47269089dd7036855f6bc7fddc4b1ac37e5331fe5f0476e092c5b0d740","e67db89cb05ecff82c40cf2f007818ffe436122c1b1a60472a7408c07d5ddc18","5e295b556c28aa43f12e67d1f0f36cbc10fb090dc14c1c66ae7ab4a39d242033","31c908fa0cde7e9c3e95bca70bbf2965e2b09cd6bfd3e3156d7602aed504483c","613c7a54deaea880de2f90c3addfe1a9eb79204606cc8973e29c47e36117e1b6","d308ed26aa33e6583b9c3bffee658c14c60f68a86ba341920aec69f22e129000","6a51893e356f5237142345fbb4d247bc07582fec6fdaa61c2c3de34a1617528a","d4477c34f5adddf1a37719c473b5e22e5d24c5bd237b4d0a607b953cc77a4964","418554fa0ebde54d6cdcc03145c7126505ed96d3734e8e7ae56dc0dfd8ca0a2e"]

Anchored

2026-10-08

Public log entry

search.sigstore.dev, log index 3140838741 · entry 108e9186e8c5677a4791…

Expected log hash

ca4949400cf2d29b49789563ea2e672fc73762380548d6fd65398e40c0d98728 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1791433229105","kind":"published-quote","locale":"en","page":"brand:deezer","quote":"It's crazy to have a paid service that is so ineffective.","rating":1,"review_date":"2026-09-20","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=deezer.android.app","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (68ee5f8618d9…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.