Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Why are you now adding a watermark when I am merely sharing an unedited PDF through your app?”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
c217e65416e3bc6e5abfc5a7180ae065ae09bb31c3c72f02e789c871f29cbea2
Signature (Ed25519, base64)
MAAlE0IMsxTVHBOpsk8oa9n3+VeDmzxqFpH5q9A9XVsd/DEU/n43A7SEKHzifqkxRVsQnBRzC2nTAqHu1IisDw==
Merkle root
1dd7fec10002d9304505761bfad9c0f048c94d1d6a0775b6fc4291f712d4106b
Merkle path
["c21fb3f03838c7a23955f7a304496d91a887dfa90df63969eecd736d5d786050","9377b53fdd111c958e48e07cdef01ec7eae421aac5ca52d718785bed5441ca75","d677d0aa956633f8ae7ad5fd53dcdb352f2c1ab2e3ef100054af7f3f3d7aa8ae","071a582bd2aa4b31f8c7c4b46172fe0258c41a06834ef6a847208803b7bf06c5","fe894a11403c048fc1b14fe430ecc4eb2fa396c63250d3e1c5d4203b0d3a44cc","5782c1127e175750303a194f5f1fde19521a6221be28b454df56926b855a2e23","eae02bdaca83810652288ff4b65f219cae55bcd2c8ffe191dd4ad6dd20e6bf8e","37d99b56ec3f90ead6961114bab558d0a8492e1786fa255a5c16e5bbcb95d06c","3a11b466d3b9943460b508551dcb357d6a83092dec22d8df48543f9c36d8b553","51f737d580df555bb184635c6f654301eda150c072d0e1bdaf16972c3fae7d54","75ed019fc7659a60f3c6d5c0fc8fa3f188f9dea28d00ef8b3dbf5f566df33435","5de29f3f1a8c8664b2718070ebdb61933bfe9bf50835c64da1842bcb3a9013b7","d7a263cbd10f2ee7a9b2e7aec47d567bb17042a152af5c55c9aec6a0275af8da","bd07d87bd70febdb2065bd01bc91c4a313429f0836c93e8304bcd2037faed264"]
Anchored
2026-08-19
Public log entry
search.sigstore.dev, log index 2514297706 · entry 108e9186e8c5677ab801…
Expected log hash
861cb9c1424d2f408888a591a8305206c340f8249f4a4581b32f940ce8815405 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787126020727","kind":"published-quote","locale":"en","page":"theme:xodo/communication/en","quote":"Why are you now adding a watermark when I am merely sharing an unedited PDF through your app?","rating":1,"review_date":"2024-09-02","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.xodo.pdf.reader","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (1dd7fec10002…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.