Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“I clicked a setting to change a language”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 2871093963

Proof data

Record hash (SHA-256)

b6a70fb528f2d5a2b2819afafd1bd51c12592e1adc5bba705c6d430dbb1e9ee8

Signature (Ed25519, base64)

OWueEZbkdcpEmUMUAk1P3loDo+4WhhGjuOhypjubHg2t3AZ7/ove9O3NhE9FnxP7yHGwuKfuALjq+o8HaHnTAA==

Merkle root

10c793aeb45e0f89b9202290e8cd37afdaa93db762a28319e14e5d167b3b381e

Merkle path

["b6a50b974a8fb74b5dba82f1cd44f8c70d1056b0325cbaaf78889025941c5d35","82bd5524b514a9ff21918cf949cd9e26f883e5fb4c870cca1f28c9dac6ead326","30a64214359c935c73077241aafb6a5103135bd9e2311319d35dfb4f67b60e76","d62bf8fa411cc5961845e448b868bd7426bf142b42745d802e027334cd110788","fd537103bb032b03811763a7fa66e7d8a5ce46f0fcaa309d0a88a93f800561e7","e75f78b541b21848b61c539db86619329feb649bdb5d8910d1ba2dc691371095","a853e64f48c3896e323c2ca9ce5335f1114b68c62858bd77bb860668afa1af5d","31b1d149e058eb122181e862c0028c046775c1adaedcfe4c4e4efe77ddf0b30d","fdd6e72cb9cf1d21b6a35f432d5cb99ea2b205c1c495b59d802ee8086796deac","e14a423efd9e6e4fc554ab8303ac5cb22f7c752b4ab9fdf274d58c6cdd1020aa","4a7ec19f5ba376837c57ff188e31557b5c4be8e7c7921aad90d7c3dcfa02ce03","ee4aec4f4219a228b36d00641a4d6491c1579af9648cbb44fd6b328250ade26b","91300f04672de2ea3a6a7045bb6ee4ee2bcdb70d160cb2223186b734f12e97d1","2130a6de1cb1cb6840fb00e7ceb486d0f838ff39b257f32eb622785c4778bb5a","2c29ac82d9fdac3248f80d2844b45fd9f65c01d1ee494b56884d4c99a3da6ff6"]

Anchored

2026-09-17

Public log entry

search.sigstore.dev, log index 2871093963 · entry 108e9186e8c5677aaa83…

Expected log hash

2dc7fe816b6373997045fe2c089e9db0b321b7c653bfed462fbdb27b856b80a8 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1789531532649","kind":"published-quote","locale":"en","page":"brand:skoobe","quote":"I clicked a setting to change a language","rating":1,"review_date":"2025-03-17","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=net.skoobe.reader","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (10c793aeb45e…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.