Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“100% The best music experience out there!”
Google Play · 5/5 · 2026-10-05

Checks (re-run on this request)

✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
✓ Public transparency log — Sigstore Rekor log index 3100032352

Proof data

Record hash (SHA-256): b9ca98a939a74c1b0cafb119b544dac5c1f6e7254b9b277b6951b23cee627069
Signature (Ed25519, base64): BZymZUwGIaQU6rHndrcx/pneeZVFvoOrVGNIlX+ISuDZ3ycZJgyolL35oQiTUt07Bkz++ZyKP3iXMcDQ/0kNAw==
Merkle root: 61203b6d05350adaaef087cbce75d25fa5ac2036c1a66344255fc73a224d39c3
Merkle path: ["b9d3d5c1ed88d022b73c94997de67832c7ac4f63874ae4cf0f681d39806e6c16","d4485bd0f771b13e70edfc14249e5e9f3a7839b22ad71ef8ed24f062348a692f","d387c65389b66ccaf60e2f6f0edcfcf3b82559a1e31f50b884ac7d9860b74abe","ed6c1b7107c5f3bd1fd4592e835a502be28942afa17044cf8a83e8e3908ebab0","2402cb274bbe4507fa7ffd557c070d8b4661da7563f5a9f8ead0cef28c2bb8fa","7b159ef58a3ee6263b295e296e3ce97023f562ffdf49ab931f3a34a198e7d783","82a3d58ec983266aeda42cc637062d539369e666373686e784cfce3904bcd9d7","4cdd5ff6972616ed943450a6846eed5c12e8e689687f3303ca1a4803657b5e8d","11206be211a1bcc8f08075b9781044306c0f0b4f6e870485a444d2fb67b7cc6a","d0b8f7f811c27c1406e7db03210a2efc432089600f4384fe96cee668780160f0","216defe8801c0d4f43a93cfec21cc878662f4d7c449b1a51a190e1391709e742","fe9424886d8e59d6ff325552439bd9214f2ee264cc3baa5803977f046fcd7739","20287ae7c1fefdf6cb9b396d6d303939703f8236403ddce9bb26cadf5d6c0b12","341c8949cb7d1561c464131d45fb650d8979e144666a41b9b51158f1f195448f","2510f720b3b91a4799a8e500c87cce52153f0727344aadf519237b8a09b893a7"]
Anchored: 2026-10-06
Public log entry: search.sigstore.dev, log index 3100032352 · entry 108e9186e8c5677abe62…
Expected log hash: 0a0ca7b748f6c99c5a75a761289092bb11c807eeee08be8ec366fad5b0bfd2d5 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record: {"dataset_version":"v1791253605372","kind":"published-quote","locale":"en","page":"brand:deezer","quote":"100% The best music experience out there!","rating":5,"review_date":"2026-10-05","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=deezer.android.app","v":1}

Verify in the public log

Open the Rekor entry (pre-filled with this proof's log index).
In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (61203b6d0535…), which ties this proof's root to the log entry.
Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.