Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“android app, cannot login even password been changed multiple times”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 3124210377

Proof data

Record hash (SHA-256)

c4bd133180e68644c5c9ffc05a0184420a0d633c8152cdf095a4659d4ee3d5f7

Signature (Ed25519, base64)

9m9L0N0z8MmCAIfdZSLmYfq/n6MSGoKNjCqc6tu2mzbGEqoIfSoSUsAS1H4mQoa9yPATlxYAIJi6z9m9q3E3Cg==

Merkle root

3b820b0e91b2475ca02a79fe65f1dcaac35af570ee21f4c868099b9c17e17c1f

Merkle path

["c4bd74d57a6f6fd5d31eac415e7609a12d586fbd268b162db9d28ccb85c87814","7acd3942bc18501c5c38afe77803f55ef28fb3d0691d60f5a08dc731f50fef8c","80713fc0a440aa57e820510d1272faba1870c161e3c94fa056b095317ae7534a","6ea79bbfee4d3a73cf97771a993526d13f5172564c584901209939839e8ad5b8","1f56d70acec8fa9beb38287a228888ead1d6fc77e296f8b433391a63b51644f8","8fcc18d2ed5ff2770c057b4a000c08ddf01f9db05f2f441b78c512937e66c170","020e68087f8a41b4e7d6c46b2b660412de32adfe3608743e9ddc0b3b42fb4647","e088abd4e3941e7472d17e26cc7e7c38ff3eace8c89c832d4ed25e79ba0ba367","e87cc5e48969904dc97be2badac446ecd670203453b6f889b92254c774733ab8","0cb47aeb2c56faedba6273b77174655453b82fbe544edf1e66b7823b95a193a2","c635f0ec267462446a63ec6b2accc48e91fd2805b91824e03525e4053b26d1b7","271ea18e0d929c969a6b4d324788b46af932cde0a45a951a5ecb3d6a642cbdbf","7e472eb0a3b58e61070423986bd83b0a6c7c1fb4306803b1a250ecaf0ef71a97","00a544d427d2b0ef6286f24c44cfcf3a5f82bad04bf6442e459c003cb18785c1","10553711bf6721bc3fa0f227ed3bf669673b7af202d9c22d19db8987b7ed8714"]

Anchored

2026-10-07

Public log entry

search.sigstore.dev, log index 3124210377 · entry 108e9186e8c5677a0172…

Expected log hash

20a5241ced0c7b94303a7b8002f1aae217df3f1371aea54ff5745a148bddda47 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1791349684588","kind":"published-quote","locale":"en","page":"brand:audioteka","quote":"android app, cannot login even password been changed multiple times","rating":1,"review_date":"2026-09-04","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.audioteka","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (3b820b0e91b2…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.