Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“I want to cancel and I can't!”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 3029042635

Proof data

Record hash (SHA-256)

bbc6f0a3d1dbeae0b8176b7bf40544937f7ebd9c0aee84c47c9aa67f949de6a9

Signature (Ed25519, base64)

u0yso4WVm2qA1T8EJQkDSFSap+jvuVnvHAzVRE6OYDu2ftyD+abmJAHqOs+DyOMKup2Gmzv4PWcnREJ6eVbzAw==

Merkle root

c9e6077a1bda893f1455402f424b1d526c8cf2f47d428b611fd8d7fd8b45f80d

Merkle path

["bbbed39990fba28dcda450a7a4734aec1212e72d73e4ad9c23639df9a2701cf6","d9fd61d48c6266228208ab94b7d5e9a627f57b023508f6d1ad3f73582778150d","42003e970b268a05ee1876616a86acad619b30f24fad363f38d99d89c403d13d","77f1c2d47ab4e416540f0b488227bd76bb7c0a717c4034e5286d8b07a044e825","def57f38f0784d9babcf1b01429602737c1109bc64bddf6eb2b6034c26268f97","cd64e5d8ed5d39c189fcdb18a78b91949d43a7129ed6ee4eea1bf6c341afd06a","7242924681f9512d03567077a845773b21b3d1f8cac174e5dc69e13843dec397","d3bfcc6f6326e0ebbd28c28be1defb9b937c2359aad715b3264b9313f2c45d04","26034dc4f54aaaf8a05ef760b2e8f4e051598433a04e99264a5e2ce998782b1d","68078040695dd78da1fbf82c72838ca17e4d056b4f39a6cf6772fc73dc8ed3a4","710b2b904a9ab8a2349128770f7682c32f2a3210ed30efc0684cb7d4b0021083","a053a1075cbdeb4806ef4345aac27ccb08b07f974dcab0d7af22da301fda4f00","8d810c8f9c62441734c87c36156dcad8983bbe1dc90b3b2854fb49cc7a54d2bd","1616c16ecfa49e18821de7767bf3fa1e1a6fd3ec2fa090ad2f10f8770da252c6","e91b4f1cf428f19a0932cddea6de9c1c364010417f9e244d933b133a023a7aa3"]

Anchored

2026-10-01

Public log entry

search.sigstore.dev, log index 3029042635 · entry 108e9186e8c5677a4403…

Expected log hash

38d9b7e95b1b3c998a8128983d818774fe7ee047adb6f05ee608495c2d7aa418 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1790741815621","kind":"published-quote","locale":"en","page":"theme:everand/billing/en","quote":"I want to cancel and I can't!","rating":1,"review_date":"2026-08-23","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.scribd.app.reader0","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (c9e6077a1bda…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.