Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“refund was refused”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
bdd76e663ed8e177825be5dfd932d1171f085395e1df30cf7b06dbc9761472f1
Signature (Ed25519, base64)
MIrZP5CIBePqHr8zbgs7yZT3bNiYF4skQOw3b90PrbVQEdVW4nnyN+toA/Oh/J4fYMAU+S8/DfMN2aEZyBElCQ==
Merkle root
e299bf38720a5a91bdf63bbc0205245bccdf3432ab1652c69342549658b7a9ef
Merkle path
["bdd4ea8964369d03988044bdee395f458bad054418da39e8f32f2d1846e9c988","2a6e2156bcfd273e7cbbd789d36e63108b0cc97814f70111ab1fca7ff008e67c","fe456def8a756387c7aed2923531e32a26f55d907096390813abaa782bbb9d53","422cf5446807a072043ad6242310e8ff9b1cca5eb29e663d839df6c9867126fb","2ddc93fe7c38eda187e4209814f03c1154c12f26f3b118bca5127ccd440e30b1","c7f419a857c4c69515951bc5304a3ab2852b55f3b5176e0d2c81fa239f571972","346cec180e06f8527194751b1597277c0d25f02c3642f46836be20f81e1e102c","44a50a5b76516469c718996f86756c884dfba15bfc7ccec6dddc7b8cd3988001","d21abe8d9a0ce3f9ab89c80abd741c9e8a75496961edcbd3a6925e40891e5dbe","b2b50bfdb272cbdd9b1d73312ebc06ef5163e463135f176505bcaa3e4df4fce0","0fded0d410956042b9d1acf691c64135a230864a49447caaa2620cc5b48c956a","1b051bf1ff36589fb2c3614b917f0b7f052e466f644868f148d61dc06ad499eb","06f94171d32c86f72a9e1d984f2a7c3fa7bd9f00a98eabaa3fbd7d57db71aaf2","e3714293de39ce3c6e3cb9d5ea7711343b19d2be532c75504682d8ef52e8f91e","2a462314156907e42d6f0d96eed96123f1d79516aef73ed189d9f5466556b638"]
Anchored
2026-09-21
Public log entry
search.sigstore.dev, log index 2904877428 · entry 108e9186e8c5677ab408…
Expected log hash
d020708737f55ccdf49203f373fcbcefe8158cc388605556fbfda3c365de7360 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1789881486272","kind":"published-quote","locale":"en","page":"theme:vaia/returns/en","quote":"refund was refused","rating":1,"review_date":"2025-11-21","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.studysmarter","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (e299bf38720a…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.