Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“it's telling me to unsubscribe on play store.”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 2904877428

Proof data

Record hash (SHA-256)

c2c3edb091185fba7a21421f8fc6c76895f835a60eb42e0578c3fd397cb8aba3

Signature (Ed25519, base64)

axJK1ZPXeUHnszdyo9NFmZAo05fUvS8yPi3f7abGOvpX5dBk9bE4RW7xHG4OOwPXYpd3v9YmHfZXwP0xK6WUCg==

Merkle root

e299bf38720a5a91bdf63bbc0205245bccdf3432ab1652c69342549658b7a9ef

Merkle path

["c2c289d9e0eb00e96d1e66b3271f7988cb9647b9ccae053ec6d333cf1b5c7dec","2b3dcd1ddc544f11fbf91ec0c3954bc0eb30328c8e690543aeb27bf64a5bf226","7454fd809aa4f85a705bfbd3636c8c51c5e8dfa9f21771ce39ecd24bab9ad546","c33a56035ff538a31754dab69fa8a4a06614931375aadd9f624024a05ffa389e","c20ccd301f238ba75131b04f5c7bfaabbc6c78e4ab76e19fa7ec5700cbb556be","ef2e8f3b4c44e6616fcdaf54dea59a388aa9f3675c72f90a056a41066012995f","c720be33bd3a5f415ba6b47b0bf40eb07be33bd4a9d0cbbaf3e63e89a133df3d","152af7a724f1c7ba3b6691a7a8eaddcd4e3429c2567e4cf46447b3995e264e42","94378470a75b7a5d1c1dc61e3cb5aef2251790ff7df4a69c0402d7ece8954b52","9e7d655ca6a7277695c2a69e3da04df8569357510dde3cd8a0597f7d884d3ada","c76744f61713b161c2df73a6eec773c0acb500654c459ab09b4f8ebb3ba40f92","1b051bf1ff36589fb2c3614b917f0b7f052e466f644868f148d61dc06ad499eb","06f94171d32c86f72a9e1d984f2a7c3fa7bd9f00a98eabaa3fbd7d57db71aaf2","e3714293de39ce3c6e3cb9d5ea7711343b19d2be532c75504682d8ef52e8f91e","2a462314156907e42d6f0d96eed96123f1d79516aef73ed189d9f5466556b638"]

Anchored

2026-09-21

Public log entry

search.sigstore.dev, log index 2904877428 · entry 108e9186e8c5677ab408…

Expected log hash

d020708737f55ccdf49203f373fcbcefe8158cc388605556fbfda3c365de7360 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1789881486272","kind":"published-quote","locale":"en","page":"theme:vaia/billing/en","quote":"it's telling me to unsubscribe on play store.","rating":1,"review_date":"2026-01-11","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.studysmarter","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (e299bf38720a…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.