Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“That's just too embarrassing for a payed for service.”
Google Play · 2/5 · 2025-11-18

Checks (re-run on this request)

✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
✓ Public transparency log — Sigstore Rekor log index 2543857133

Proof data

Record hash (SHA-256): bffe295886147640216dd1afa1c5c528e9b0bc6cb0532df83f11be9dfc7c2cec
Signature (Ed25519, base64): t2vkcdzSJPy7Ad489kboFQ2+yDqjMJ9wWGhK57hBd70IA6tA1yJIZ0cRp11LQ5EjJHmoeM/3lvYtMCuD5PlTDQ==
Merkle root: cee60bb6c0816d1bc69326ea12cf0c5c00cbea13afa283147bf24b52e30f839c
Merkle path: ["c00b894851bb81860a133eea5a99092f3f96ff61675965b0d7bf71ff0d1b6b5a","67f808acaf1b9e14b36e28230f595877de111c65c64ad3bbca167c155cd5c5f5","8c35b74353ba98b7961e936f53b88a7f0420d2d13b61eccc55a6fd9322147397","378655a4aed0235446f0cacd5f40cbe700ee9e8bfba10ea88fa81707a25d4ea4","9591246c36892adf5f5c7ee7d58ef19409fd75a8d8e44957193ba7c0f28b5975","3c8e511fbcb01e864c81c556539845b462c3c830b28707cd35f2d9a446f0bb6f","5b9d9d1d33ca276b3620968bbf52d12faba38819ac0fb925b0719d2244942ee8","91e3d9f14fe10d69e671a18a8740d5d7f73a7be72700c6192681f84d99816864","b98055f8aa3417676b177cc39f3385aac3319bf951acfa7e168bab52a727809e","6825e99420e057c5c696467ed99d35c7af045c4a357ce434f3497aa7721dc8f2","2d4474fa1cd901c5132cb079999010b8266ba8ab28e588299d31298b406427e0","7e080327298c3290117c531f77fa95cbadb23f6b744e8bc715d651a10ac29e6e","a00b4601749348f2fcd6f79560c522307796ec3ce8055ec55da33a69b027ab14","6d215dc9023570789455be9902e0d62b0310ab7bcbe811daa69263c90da55ffe","57e3801fc0af4bd2492130e334ef2d0425fdcd10c95109df38ad0d371e279fbf"]
Anchored: 2026-08-21
Public log entry: search.sigstore.dev, log index 2543857133 · entry 108e9186e8c5677a5231…
Expected log hash: d8e1ac8b740526c2915424d7f7c6bce881a4ef05d0a3a3dbd88e4c760e36623e The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record: {"dataset_version":"v1787288037224","kind":"published-quote","locale":"de","page":"theme:storytel/billing/de","quote":"That's just too embarrassing for a payed for service.","rating":2,"review_date":"2025-11-18","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=grit.storytel.app","v":1}

Verify in the public log

Open the Rekor entry (pre-filled with this proof's log index).
In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (cee60bb6c081…), which ties this proof's root to the log entry.
Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.