Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“In my 5 years of using this app, it has never betrayed me, good job devs!”
Google Play · 5/5 · 2026-06-05

Checks (re-run on this request)

✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
✓ Public transparency log — Sigstore Rekor log index 2904877428

Proof data

Record hash (SHA-256): bc6f5e05399f7d28d266cad07b96339ea47407d49867a4505bceb2293b0f9c42
Signature (Ed25519, base64): o+NVsDG6wAwwIk4I2k8poyGbHfT3OymK+Y2707743kqU60oSpkxjHOT5XCrcLaHghz+M4w3LEtpB9J+whJT5Bw==
Merkle root: e299bf38720a5a91bdf63bbc0205245bccdf3432ab1652c69342549658b7a9ef
Merkle path: ["bc6fd4f76d5ec2420535f0fd03650243c55df5174e33b7ca865377164d8c32a4","2d50bdb3b447df44137f22f23c8ffcb2c7ac05fdf1873815743bfd6d7593cbe4","842b3f6a11ba357fd8d70942cd0be30d02f2914b091ab0d5b9033cc74cc80203","323fbc111cda1c476bc7cd92c378482aaf55ef5ad48a501e745ffeb290fbc5bb","4b941a7e49f8e2cc5bae4e5160da3ee69cab12e195f8062483650ae543046e50","8137e19d8647838b2dc20dbfa0ad9146c1ef22ccc0be2676a8c3d3aa0f93d12e","79dc4f20240a18233d0668af4b38d46a0944621f8682b2ae97636173a462cec5","779647a30777fd5e8c18debc0c1c129ccea7d1fcede30753a962bc2f875fbe67","d21abe8d9a0ce3f9ab89c80abd741c9e8a75496961edcbd3a6925e40891e5dbe","b2b50bfdb272cbdd9b1d73312ebc06ef5163e463135f176505bcaa3e4df4fce0","0fded0d410956042b9d1acf691c64135a230864a49447caaa2620cc5b48c956a","1b051bf1ff36589fb2c3614b917f0b7f052e466f644868f148d61dc06ad499eb","06f94171d32c86f72a9e1d984f2a7c3fa7bd9f00a98eabaa3fbd7d57db71aaf2","e3714293de39ce3c6e3cb9d5ea7711343b19d2be532c75504682d8ef52e8f91e","2a462314156907e42d6f0d96eed96123f1d79516aef73ed189d9f5466556b638"]
Anchored: 2026-09-21
Public log entry: search.sigstore.dev, log index 2904877428 · entry 108e9186e8c5677ab408…
Expected log hash: d020708737f55ccdf49203f373fcbcefe8158cc388605556fbfda3c365de7360 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record: {"dataset_version":"v1789881486272","kind":"published-quote","locale":"en","page":"theme:vaia/durability/en","quote":"In my 5 years of using this app, it has never betrayed me, good job devs!","rating":5,"review_date":"2026-06-05","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.studysmarter","v":1}

Verify in the public log

Open the Rekor entry (pre-filled with this proof's log index).
In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (e299bf38720a…), which ties this proof's root to the log entry.
Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.